Data scraping, there's not really anything or not much that can or should be done about it. ActivityPub is, as the name implies, intended to be mostly public. If something is public, it's public.

Bots, that is a more interesting question that may become more relevant in the future.