Agreed, but I don't think scam and spam bots are using the API anyway - rather puppeteering tools built on Selenium or any of many scraping libraries and toolchains.
Even if they were, who's more likely to pay for an API, the scammer making shit ton of money from tricking twitter users, or the hobby dev making a cool integration with Twitter that brings people to Twitter?
