For half a second I was thinking that auth on relays would fix this, but I don't think that would fix it either. Even if it was free to authenticate on a relay, whoever is writing with spam bots can just have the new profile authenticate before making a new npub making that pointless.