Can't stop bots , adding some kind of cost to creating a private key destroys the permissionless nature of it and creates a barrier. While at the same time making someone, somewhere in charge of what this barrier is, should be.