I think Nostrs way of protecting against spam, is to allow the spammers to just tire themselves out. After a month they get bored, thats our spam protection.
During the ReplyGuy wave years ago, my client had an issue where i couldn't mute anything. Absolute punishment