The obvious fix to bots and scalpers is just to not allow ticket transfers - you give your name when you buy the ticket and show your ID at the door. Why this isn't the current process is left as an exercise to the reader.
AXS requires that you use their app and it must be logged into the account that purchased the tickets. The QR codes need to be refreshed before entry and expire in 60 seconds.
This presumably requires scalpers/bots to create an account per ticket purchase, and there is probably a limit on the number of accounts that can share the same payment method and address.