Have you considered adding CPU time?
> "There's no technical reason for filters! Filters don't do anything!"
You were saying?
https://supertestnet.github.io/spam_tester/
Discussion
I've not given it very much thought yet. I think it would be difficult to estimate how much a cpu was strained. Do you have any thoughts on it?