Requiring NIP-05 could be really effective, right? If a domain spams, we can block the entire domain...

but they could buy hundreds of trash domains, no? would cost/effort be prohibitive to do this at scale?