I think the broader solution is approval-based instance federation. I know that’s a little anti-fed, but this type of attack has no other solution I can think of, and banning a username just means the attacker rotates those, (too).