unsigned notes can’t be pumped into the network. If you connected to one of these trusted relays today most clients would reject the messages. They can’t be spread to public relays because they have no signatures.

You can spam the network with signed notes just the same anyways.