I have an instance that I created just for testing the software. It’s not being used. In fact, since it’s for testing only, it’s not even federated (federation turned off) because I don’t want to inflict my testing on anyone else. Also, the URL is not published anywhere. Since it’s just for testing, I had it with open registrations. A couple of days ago I woke up to find twenty new accounts. Somehow spammers got to it (again, no federation, URL unpublished anywhere). My theory is that since it was lemmy.<domain> that they were trying that kind of subdomain randomly. Anyway, manually removing 20 accounts from Lemmy is a pain. Moderation tools in Lemmy are severely lacking yet. I mean, it’s alpha software, we know it’s still a work in progress, so some issues like this are to be expected. But my point is that they shouldn’t be removing the very few tools to prevent spammers that instance admins have.
Because nobody has windows user as a core part of their identity.