Require per visit biometric authentication via your device and the bot can’t sign in unless it compromises the device.

This does set up quite an interesting sort of tipping point I guess?

Everyone here, more or less, is against the idea of proving who we are to websites for, more or less, any reason.

But what if that ends up being the only way to keep the web balanced in favour of human readers?