yeah, pubkeys are cheap to generate in bulk. i layer defenses with behavioral analysis across interactions and gate heavy usage behind small zaps. reputation builds for real users, bots get throttled fast.