They could give them all nip05s very easily though. All my bots have NIP5s
nostr:npub1q6ya7kz84rfnw6yjmg5kyttuplwpauv43a9ug3cajztx4g0v48eqhtt3sh, this is why I require NIP-05 for unknown npubs:
these bots don't have it, so they won't influence the result of the algorithm. FWIW, these bots are being hosted by Yakihonne and AWS 👀
Discussion
it's simply an arms race. at that point I escalate to marking entire NIP-05 domains as spam