Thanks - to be clear, we're not disputing that SEO-spam abuse of the free signup is real, and your reports feed directly into how we're closing it.

Two clarifications, then what we've done:

• It's abuse of a free public service, not a "hack" - no breach, no vulnerability, no unauthorized access. That distinction matters for how the community reads this.
• On volume: our daily signup rate has been flat for months - the share that's SEO-promo is the real concern, not a sudden spike.

What we've shipped or are rolling out, much of it aimed at the exact vectors you described:

• IPQS (ipqualityscore.com) has been helping us check quality and vpn detection, etc. hardening its rules/configs (exist)
• Email reputation and domain check, temporary emails blocks (exist)
• Per-subnet rate limiting for IPv6 - closes the "rotate addresses inside one allocation" trick. (new)
• Restored and broadened Tor/bot-network screening, now covering IPv6 exit nodes. (exist, improved)
• Closed a request-header gap that could mask the real source IP. (exist, improved)
• Server-side CAPTCHA (Turnstile) rolling out - you're right the current check wasn't verified server-side; this fixes it. (new, in works)
• Content treatment (rolling out): posts from brand-new accounts that carry outbound promo links get de-emphasized and their links flagged as untrusted - so the payoff drops to zero, on top of the existing noindex. (new, in works)

We're aligned with you on stronger CAPTCHA and email-reputation; phone/ID we're avoiding by design (no-biometric). The fastest path for specific account batches is still the channel where you've been reporting - keep them coming and we'll keep closing gaps.