believe that i’ve seen versions of this attack where the spammer makes a few innocuous non-spam (but not contribution either) posts before going full LLM bot

A more critical weakness is that these accounts only posted obvious spam; they made no effort to build up a plausible persona. Generating plausible human posts is more difficult, but broadly feasible with current LLM technology.