"for every proposal we make, I think we should discuss how it could possibly be exploited. If this proposal passes how could it possibly be exploited? Maybe there needs to be caps/limits on what kind and how much each account can burn."

Excellent point. And the only clear answer is that only one account per KYC verification should be allowed to enter, but they won't do that, they'll just let the bot farms clean up some more