EDIT What I mean: I’m wondering if people let their bots post/comment on their behalf. I’m wondering how we can detect and prevent this from happening at scale.
I don’t think simple things account creation date alone is a reliable qualifier. You could easily give your bot access to post using an old account.
But overall - whatever dang & co are doing to minimize the problem seems to be working fine.
What's old is now 'new' again.