Anything that prices spammers out of abusing GitHub actions is a win in my book...

Maybe it's a lack of imagination on my part, but how do spammers abuse self-hosted runners?