They were already rate limiting unauthenticated users. So are expected to believe that a hostile user who has zillion of ip addresses (to get around the rate l

They were already rate limiting unauthenticated users. So are expected to believe that a hostile user who has zillion of ip addresses (to get around the rate limits) won't also be able to make a handful of accounts?