first point can be solved by serving the delete request instead

proving that the spammer deleted their note

secondly, you can have access control lists on a relay that bypass that and show the event itself AND the delete event

again, another thing that paid relays can solve

yeah, it really was given the right number, fuck censorship