So what is the solution here? Being an admin of another forum, after activating various CAPTCHA barriers at registration I ended up requiring admin approval of every new user.
To my surprise, registration doesn’t include solving a CAPTCHA in this forum. Just clicking on a link in the registration e-mail, which stopped being a problem for bots about 27 years ago… and was only a problem if you couldn’t post before confirming.