@Gargron maybe something like filtering out a notification if it contains a link and no one follows that user locally? would at least stop link-spam

although idk i personally still think a widespread culture of human-reviewed signups is the best safeguard against spam -- anything beyond that is plugging leaky holes...