I don't see how that could be done, the bot owners can always just spin up their own new instance where they control sign up requirements.
Other instances can then defederate from the spam instance but they can quickly spin up a new one.
Gonna be interesting to see how it's solved.