FWIW my FeoBlog implementation dealt with both by only accepting content signed by people who were explicitly allowed on that server, or followed by one of those people.

Are there Nostr relay implementations that can do something similar?