It really doesn't matter if Mastodon adds better abuse controls because ActivityPub is literally structured in a way that makes abuse easy. A popular account can DDoS itself just by existing. We should be figuring out the next thing, not wasting time on something that's inherently broken.