The only way to prevent spam while staying decentralized is to send an "authors" filter with every query. Any query without an authors filter is susceptible to spam.
Therefore we must add an "authors" filter to NIP-17. The best proposal so far is to precompute the nip44 shared secret of everyone you follow and query by those authors. But we will need to extend signers to allow safely signing events with it.