The key point here will be what is the price that will required to pay for access to the api. The one point missing in your discussion is this, it may not be principally about bots and abuse, but revenues.

Cash is life, and if it helps kill a few bots — could be the calculus at play.