That is always a concern, yes. You can block users, and entire instances, that spam.