[flangola7]

The OS could have software that detects if bot-like input is occurring.

Even if not, they could just rate limits how fast you can make requests to a speed that's plenty for any legitimate user but terrible for bots. If someone wants to astroturf as a million people on social media, they will need a million physical motherboards and a million genuine licenses of Windows, and a million rubber duckies programmed not to act too fast or too continuously. No more Xeon blades with a fat WAN pipe running a credentialed script.

I actually don't know if input devices still don't have TPMs or not. I know display devices do - try watching Disney+ on a CRT, or even an old HDTV. You'll get a nice error message saying your display is too old and unsupported.