Comment by robotwizard

It's pretty straightforward to me at least what needs to be done. Add 2fa sms authentication and restrict trials to one per phone number. It's less easier to get new phone numbers.