Is Bob a verified, known identity, or does he simply create unlimited accounts and continue the spamming or abuse?
Mastodon is federated, so you already get to choose who your content moderators will be when you pick a server. Blocklists are just an informal and spammy-by-default version of that.
If Bob spams thousands of accounts he'd quickly get on multiple block lists.