It seems very difficult to impose a cost on these bad actors without harming honest users as well.

A user could stake a small amount of money (say $10) in order to create an account on the instance.

Aren’t you suggesting putting a literal cost on honest users?