Key management remains challenging, though solutions like NIP-46 and hardware signing devices are emerging. Spam prevention is ongoing. Discovery mechanisms continue to evolve.
These are seriously the only issues and the spam is hardly an issue, some hashtags are completely unusable because of meme bots that spam 20 different hashtags every 10 minutes, but once they're muted it's fine.