Discord is a product, not a protocol, so it should be in their best interest to communicate the extent to which a third party application might misuse their data. This is the case with the new scopes that require ID verification now, backed by the promise that Discord will sue you if you break their conditions of using the data provided to you.

This has some other unfortunate side effects (user tokens can't be used for bots, third party clients are a risk), but unfortunately the only way to really curtail this behavior. Privacy is not something easily understood, especially for people outside tech that just want to be around their friends during the pandemic, do not be blind for this. Technology can't be the sole component of solving this issue, so I'm glad Discord is committed to legally perusing those that misuse their API.