Damn. I understand why you did that though, it really sucks the motivation from you having to deal with these bots.
What seem to have worked is I changed the security questions since the old had been recorded for the bot registration script. We'll see for how long that lasts. Also created a small custom tool/UI to make mass detection and deletion take 5-10 seconds instead of minutes.