We don’t know yet how best to deal with spam across the protocol. At present it’s easiest for relays to do something as they have the most data. However clients could use a pre-built model to detect spam themselves.
So yeah, todays it’s relay specific and clients can only really modify their relays to ones that have some protection.