Hmmmm, isn't that an inherent property of any for-public-use database? By your definition, any public pki (keybase.io, keys.openpgp.org, etc.), social network (Twitter, Facebook, Mastodon, etc.), and more are vulnerable to someone just writing a script and bloating their database.
What mitigation strategies do other ecosystems use? Why can't they be tried in the keyserver pool?
What mitigation strategies do other ecosystems use? Why can't they be tried in the keyserver pool?