At least here we have Fediseer to vet instances, and the ability to vet each sign-ups.
I think eventually when we're more targeted, we'll have to circle the wagons so to speak, and only limit communications to more carefully moderated instances that root out the bots.