Please. Captcha by default. Email domain filters. Auto-block federation from servers that don’t respect. By default. Urgent.
And yes, to refute some comments, this publication is being upvoted by bots. A single computer was needed, not “thousands of dollars” spent.
My understanding was that you don’t want any data from a defed instance on yours. What if that server has CP or other illegal crap on it? Could open instance owners up to liability