That's certainly another theory why these bot accounts don't actually seem to do anything (so far). But it doesn't fit to the picture that lots of naive instance admins seem to ask for help against this.
I am starting to think that it is either some test run or a greyhat that wants to force instance admins to improve registration security before actual bad actors exploit them.