It definitely does get tricky. In general, guarantees about control over the network get tricky, and it seems like a limitation of the fediverse for this sort of stuff.
Imposing limitations can maybe go far though. Keeping such users on a single instance or on a single platform could be helpful? I don’t knitter this space unfortunately. Maybe some cryptography would be necessary?