self-moderation and perhaps eventually a consensus mechanism on the protocol level. As in X users on note Y blocked / flagged account Z. This gets relayed across the network for other relays (users) to verify and forming a consensus banning the content, bots or whatever.

But for now I'd say self-moderation and selection of good relays. I don't get much spam but I also don't use many relays.