I think having to get a cert is even worse.
and some will get camped by bots, but that's fine since different projects have different tolerances for contribution quality. I'm thinking like the bluesky moderation system, where each repo can subscribe to a particular pool of vouches in addition to their own. you may have lists for no ai, lists for responsible ai/abides by repo rules, or good intentioned but pure ai and minimal human contribution.