You BOTH have to have ONE (or more) Relays in common.

Spam. So far spammers seem reluctant to pay. So paid relays basically spam free.

The ones run by devs wide open (so the spam comes in) I think a lot of that is to give the devs adverarial stuff on which to practice antispam ideas, all power to them :-)