There are paid relays, you can also have private relays I thing with whitelisted npubs. Relays have many policies for spam, requests by time frame etc, by ip address etc, but the most important is at user level, if you don't follow that npub you won't see much spam.