Lockdown Twitch API
I think it is time to deny API access to all unverified bots/extensions. Malicious users are creating bots that are using the API to target streamers when they go live by hate raiding, follow botting, and now spamming other channels with malicious stream advertising messages in an attempt to get their targets banned.
All of this goes away by requiring bots and extensions seeking to be added to the platform go through a review process.
If Twitch doesn't have the resources to properly staff such an effort, crowdsource the review process.
Something must be done, doing nothing is no longer an option. Malicious users are tearing your platform apart while you fiddle away on the roof providing band aides and half-measure fixes that treat the symptoms and not the cause and do nothing to prevent the next attack vector from being exploited.
Meanwhile innocent content creators are exposed to harassment, racist, sexist, and ablest attacks that are cause a lot of stress sometimes resulting in the loss of their accounts and, for some, their livelihoods.