the only thing that stops bots is stuff that also hampers userfriendliness and functionality. we're talking about having to human-verify every time you comment or upvote :P
it's not pretty but it might NEED to be done if people are going to exploit the system