the most common use of nostr.watch is finding online relays is to assist with relay lists and outbox model. The issue here has everything to do with a bad implementation, and little to do with nostr.watch. if you're not on nostr.watch and a spammer wants to spam, they'll still do without the API.