The problem is any npub can send an invoice request, and just blocking all invoices would be bad.

To me its appropriate to not show content or invoices for npubs you arent following.

Also appropriate to warn "This might be a scam or spam" if your followers have reported the same npub for such.