I mean yeah, technically there will be some EU member states with different guidelines (due to different id/privacy laws) where maybe yes, a few of them could theoretically maybe be pumped up by a bot.

But uh, for some thing… you’d need a fairly well done bot net to even kind of pull that off for long.

As you say: basic ip logging.

If its all coming from… a single, or small number of ips… assuming the EU is at least as competent of a server admin as I am, yeah, that’s gonna look pretty fuckywucky in the logs, probably get noticed within 24 hours max.

And yes, I also seriously doubt there would not be some kind of verification of signees at at least some level, that would be initiated after all the thresholds are passed.

But its wildly innacurate to portray this as if… oh yeah any idiot vibe coder could just drill this up to whatever number after 30 minutes.

That was the way the internet worked back in 2006, or how stupid say Twitter polls are now.

Not the same level of inept incompetence going on with EU government websites.