outside of running your own instance, asking your instance’s owner to block them, or joining one that already has the offender on the blocklist, no. It’s requested a lot though so it’s probably on the todo list

idk, im surprised it took this long. there’s a huge variety of admin teams with varying degrees of security awareness and it’s been over a month since the first big influx of users started. it’ll happen again too and probably not before too long