There was a period of time where I did see spam on Nostr. But I think a bunch of clients added basic web of trust measures since then.

Of course there is more to do around that like preventing bot nets etc