I mean for now it seems okay, I took the liberty to checking our your instance to check it out and it seems to be okay imo too but still keep an eye out of bad actors

I think what you can do is take a small subset of users that have registered in your instance and observe their behavior. If you’ve noticed a lot of them are acting in bad faith and in bad behavior then its likely that a lot of the user registrations in your instance are bots. How active are the users in your instance in terms of posting and in commenting?