1. Considering most client-side analytics are based on IP address, you will require a large number of IPs.
2. It should not be terribly hard to filter out known open proxies or sessions with a specific nefarious pattern.
Overall, I think this post addresses a problem that doesn't quite exist yet; and if/when it does, it can be addresses in many ways.