Yeah limiting without login is complicated and people will find ways around it and abuse it quickly. And even with a required account it can still happen.
It's an interesting tool, but the appraisal mechanism for some of my .CAs is completely out of whack (low). It may only be for .CA, because my .IO and .COM evaluations came a bit out of whack as well, but on the other (high) side of the spectrum.