Over 2000 accounts suspected of being spam bots

But bots are third party softwares. Is it not possible to revoke their oauth and simply ask them to create a new one? It won’t be a major inconvenience to false positives, but it would stop most of the spam.