Easy to say until you're running a service that's a target of said abuse. Do you have a better solution?
If you do, it'd be quickly adopted because no one likes adding unnecessary friction.
If you do, it'd be quickly adopted because no one likes adding unnecessary friction.
A very low-cost approach suitable for a small firm would be that if someone is abusing your platform, you expose their account history.