Its all a moving target and accuracy is against a random 10% sample of split data before training.
The real world testing is the last couple weeks where I’m seeing validated accuracy against significant volume - I pre-filter 6,000 spam events/minute at present.
Can it be beaten, yes. Does it prevent flooding or other spam attacks? No. But content based spam like email should have some level of manageability with spam detection models.