They are iirc.
That does not stop someone from having anonymous accounts do their work. Delegation smart contracts could provide this as a service. There is always a way to self vote with vests you own. - unless not all vests are worth the same.
There is no way to detect or prevent self votes. Period.