Not sure how this is solved. Not without a way to weed out new bot npubs vs new legitimate users.
Introductions from established users who know they aren't a bot, because they helped them get set up, seems the most effective, but also the hardest to scale, and leaves those who find Nostr on their own out in the cold.