Hi @plsak, this is indeed a problem that we do not fully solve.
As you say, once we have good means for proof of humanity / personhood, for example by people parties, we could attach such a restriction. But they are not ready yet so we think it is worth to nevertheless already release the SNS without this and potentially add such improvements in later iterations.
One idea to nevertheless mitigate this problem a bit is to give some tokens to principals that are already “known”. For example, when a dapp has been live for a while, there might be some principals that have very active profiles and a lot of community members might even know the person behind the principal / profile. When a dapp is decentralised, it could choose to give some initial neurons to such “known” dapp users and less tokens to the initial token swap. This does of course not prevent the problem as a) multiple dapp profiles might belong to the same person and b) the dapp users could purchase additional tokens in the initial swap, but it might make an attack harder and thus provide more confidence for decentralisation.
Does that make sense?
Thanks! I am also looking forward to seeing SNSs be used by a vide variety of dapps!