There is a bot problem but ID checks are invasive, and you can stop the bots with things like Hcaptcha Passive and Turnstile which use POW to waste the CPU cycles of bots and look for signs of things