Wouldn't some basic rate limiting for new registrations do the trick? I rarely would register more than a domain or two a month for an actual use case. Maybe some logic to not ding you for also buying example.com, example.net, and example.org at the same time, but locking you to only a couple strings of "example" at a time?
