Why not just captchas and a classifier looking for bots in the sign up process? That, plus better detection and removal of bots seems like a "good enough" option that wouldn't inconvenience real users.