proof-of-work, this is what NIP-13 is for. Filter out any npubs without a kind-0 rated at a difficulty of at least 20.
POW is not a meaningful metric when you remember that people are using Phones
What do you mean? We're talking about people randomly generating new keypairs to flood accounts, right? Phones have enough compute to run basic PoW on a metadata event