Awaiting crypto apologists blaming Gitlab that they’re the one who should do a better job without any registration.

That says less about crypto and more about default permissions for new accounts. E.g. if your CI let you open connections to tcp/25, got abused by spammers, and then added extra registration steps, would you blame existence of email?

This was my first thought as well.

As far as the OP's statement:

> (Note github does not require any personal information at all and still prevents abuse)

GitHub has also been fighting with crypto-leeches. The difference is that they're loaded with cash and can afford to "eat" more of it than GitLab.