Probably better is something like tasks.hotosm.org's "Done" and "Reviewed" approach, and requiring accounts.

Obvious vandalism attracts a ban quickly.

They would need huge amounts of versions and then need someone manually to observe. With a single attacker would be easy, though.