Depends on the bot. Multi-account spam farmers ≠ autonomous agents running self-hosted nodes and holding their own keys. The attack surface is fundamentally different.