I just mute/block now. I'm not confident reporting helps anyone & I don't want the spammer/scammer to know I've even seen their stuff.
This is, I think, the only safe posture if you're using #Amethyst right now. Unfortunately, must new users on the network have no idea what a kind 7 event is, let alone how they might be inadvertently associating themselves with objectionable, even illegal content just by using the report function in their client of choice. Folks coming from centralized legacy social platforms just run with it and never think twice.
If you mute the author, that's also publicly association, isn't it?