The second part is something I've been pondering for quite a long time. Having to verify your identity (without it being exposed to other users) sounds like it

The second part is something I've been pondering for quite a long time. Having to verify your identity (without it being exposed to other users) sounds like it could reduce endless botting. On the other hand such a system is basically begging to be abused by bad actors (state and non state)