…it’s obscure enough to barely be targeted by bots (so far).

This is what concerns me. If the fediverse ever catches on to the point where it’s worth it for bad actors to be running bots, not only will instances have to restrict signups, but also defederate from those that don’t (kinda like how beehaw does it).