If it ever grew that much instances could go private for signups, require referrals, only federate to select communities (it would be necessary at that point to avoid bad actors) Like a whitelist instead of or in addition to the blocklist.