Probably better to post in the github issue rather than replying here.
3 points
I can easily set up an instance and write a simple bot which just spams votes with randomized user strings.
Well you can do that for a little bit, until your instance gets found out and it gets defederated. And you need to pay for a new domain if you want to do it again. So the current system actually makes it cost real money to do this spam you’re talking about.
3 points
