Game Jolt could reuse existing systems for this, there's not that much that would have to be redone from what I can tell. Mainly bot identification stuff, tokens and stuff could just be handled like regular accounts with a "Bot" tag slapped on or something lol.

Are there flaws and issues with this? Yes, of course. Logging into a bot's account would be possible but let's be honest that's just the side effect of treating it as a user, and Discord for example faces the same issues, meanwhilst being a way bigger platform.

Self-botting has and will always be possible so it won't really affect anything related to that.

I've done enough research into Game Jolt's site-api and "Phoenix" Websocket Stuff (awesome name btw lol) to remotely understand them and I reckon that It'd be possible to reuse those for this.

Though if any Game Jolt developer sees this, and disagrees with that statement; Please do let me know why, I'd love to know more about how this site works.

I've also made a small sheet on the basics of the Phoenix Websocket stuff and how it works, but I'll only Include it if I've been given the permission via a comment under this post, It's all public info via your browser's network tab but better safe than sorry + not everyone might understand what's going on there so explaining it would broaden knowledge of it.