what could help with passive spamming is if relays only provide the notes requested with a specific geohash tag. That way it's unfeasible for the spammer to passively listen to all channels.