That is fair but instead of bothering to set that up I can just sign up for a free service in a hour once and just never worry about it.
any sophisticated bots are rotating IPs or pulling from a large pool of IPs. In many cases of fraud/abuse, rate limiting based on IP doesn't work well enough.