That's an interesting point. Cloudflare is doing something somewhat similar. If you are deemed "possibly a bad person" then you are asked to solve a captcha. I

That's an interesting point. Cloudflare is doing something somewhat similar. If you are deemed "possibly a bad person" then you are asked to solve a captcha. If you want to give up some of your anonymity, you can keep the cookie they give you as a token to "prove" you are a good person. If you don't want that though, there is nothing cloudflare can do to know you aren't a bad person. It's much less than "heavy regulation", but i can easily see how it could be both a pain and a security issue for some. This is a shitty problem for all involved with no good solutions...