There’s good threads on sybil attacks "Arbitrum Airdrop Sybil Loophole": Proposed Measures to Address the Issue for the StarkNet Project - #12 by FutureCollective
For this proposal, the great thing about beacon chain depositors, this cannot be ‘bot farmed’ as you need to commit capital that is locked (especially pre-merge when un-bonding timeline was uncertain) and backed by running node operations, or suffer inactivity leak/loss of said capital.
There will likely be edge cases of one individual with multiple deposit addresses, however as this type of distribution has never been done before, there’s no incentive to game it.
This may change if/when done, similar to Uniswap, which opened the flood gates for ‘address mining’ which was never a problem before Uniswap, as nobody was trying to game airdrops.