It seems it will be necessary for DO to put more of a burden on potential t-shirt recipients to prove that they are making valid PRs and acting in good faith.
A first step would be to only allow contributions to selected projects that have first approved to be included in Hacktoberfest.