I still don't understand why, after having grown to a sufficient size, Reddit doesn't just enforce two-factor at account creation time. Tie a user to a phone number at the very least.
Source: at https://smsprivacy.org/ I run an online service offering completely anonymous phone numbers for ~£3/mo. And note that you only need 1 month in order to get the account validated. Most places check the phone number once at account creation time and then never again.
I'm all for it since it seems like it would reduce trolling.