Measures to stop "distillation", rate limiting, ID verification, etc. If there were such a method that didn't harm legitimate use it would already be in place (and some things are, but they don't really work, hence the OP).
Nobody cares about "legit people", the only thing that matters is that people we don't like suffer.