There are tons of sybil-proof systems if you don't include signal from sources by default, but instead opt them in by hand. E.g. use a web of trust and then choose who you trust. It doesn't matter if there are trillions of accounts you don't trust, because you don't trust them.
Which isn't a web of trust. it is just an "allowlist". Humans are vulnerable to sybil attacks too.