yeah, i'm making sure i make a proper solution for this

one is that the most harmful is a filter that only has time limits, these are just not allowed anymore without being a paid/whitelisted (direct follow of owner) user

it is simple enough to cut off that attack if an authorised user starts misbehaving because they have to auth and thus their npub is there in the logs to remove from the follow list

just trying to do this with as little complexity as possible but still effective, i want this to be an accessible technology that you don't have to spend 3 months studying before you can do it