Please. Captcha by default. Email domain filters. Auto-block federation from servers that don't respect. By default. Urgent.
And yes, to refute some comments, this publication is being upvoted by bots. A single computer was needed, not "thousands of dollars" spent.
Beehaw got their knickers in a twist because of some spammers, back when lemmy.world and shitjustworks had... maybe 30,000 registered users in total. The solution there was adding more moderators. You don't chop your leg off because you got a few papercuts.
If you look at the volume of bots (some instances went from hundreds of users to >12,000 overnight), that's potential for worry. There's ~500,000 bot accounts sitting out there waiting to be activated. No amount of moderators can block that fast enough, and that's when de-federation should be considered.