Well, people can sign up for steemit with just a phone number or even just a temporary internet number, and they don't need to have signed up for any other crypto exchanges to use steemit. I don't disagree with what you're saying either.
As far as I understand it some of the most prolific spamming is made by a bunch of dummy accounts that are just attached to a handful of people who control all of them, the rest can probably be coached/learn over time after dealing with the learning curve.