Well, the faucet would have at least an IP lock for an hour.
This means, a botter would have to change his IP and then re-open the faucet and generate another vote on MintPal.  For that extra vote he would either need multiple accounts or he could split his 5 votes and get a withdrawal for every 1 vote. That would work 5 times. To prevent this, we could check whether at least 2 or 3 votes were made for Q2C.
The increased security level of MintPal would also increase our security level.

There is of course some room for exploiting but automated botting is nearly impossible, I think.
And to do all these steps manually won't be worth the work for 100 Q2C.


Summed up, this function would at least guarantee that a withdrawal is only possible when votes were made.
The only issue of this is that we couldn't identify the voter and say whether that vote came from the faucet user or not.
But at least we got votes.