You could filter out zaps from npubs to prevent abuse, but then it seems easy to create another npub and zap from another account 

Tricky problem