look at Mastodon and it’s practically what’s happening there. bot farms don’t even bother setting up their own servers, they just go to mastodon.social (by far the largest instance) and bot from there. and because .social refuses to have manual approval for each account, the problem keeps happening.