Systems can be so simple and elegant when you just assume no one will use them to send spam.
Spam can be filtered effectively client-side with a good spam filter. This has worked well for me for decades without the need for any server-side spam filtering.
Using NLP / LLM spam filtering would presumably be either inaccurate or expensive or both. Someone would have to pay for it.