What's the alternative to banning bad actors? Making Linux maintainers take every spam commit 100% seriously as if it was legitimate? All that would bring about is that the second "research project" would be about spamming commits to the Linux kernel to DDOS the maintainers.