Your profile and notes is open to the world and internet. ANYONE can comment on any notes you make. They don't even need to follow you in order to write comments. This is how Nostr works. I think it's dumb because it's easy for anyone to put spam in your comments and notes. They should have to request a follow before they can interact with your profile.
yup .. that's a normal wisdom but #nostr is more than normal :-) if you stopped a bot from commenting that you can prevent even a human from commenting .. on the client side - it is different .. relay should not stop anyone - human or bot .. but. clients can do intelligent filtering .. and let user choose what they want to see .. I guess @Vitor Pamplona clarified it .. the filters have yet not made it to the #threads screen .. which is fine ..we can wait :-)