Comment by udia

I agree, 2FA seems unrelated to stopping bots. It really seems like some form of rate limiting and captcha should have been used instead.