EDIT What I mean: I’m wondering if people let their bots post/comment on their behalf. I’m wondering how we can detect and prevent this from happening at scale.

I don’t think simple things account creation date alone is a reliable qualifier. You could easily give your bot access to post using an old account.