Making new accounts isn't trivial. You can add friction from suspicious attempts like requiring a phone number or making them wait some time. Some determined

Making new accounts isn't trivial. You can add friction from suspicious attempts like requiring a phone number or making them wait some time. Some determined attackers might slip through but at the end of the day all you are losing is some bandwidth.