1) Manage it directly, immediately, and independently of any third party as to quickly respond to abuse.
2) Directly trust the web client's reporting of IP addresses, which is the primary form of unregistered user identity management on IRC.
3) Perform proxy detection on incoming web client connections, which they already use for non-web connections (http://freenode.net/faq.shtml#firewall)