You are quite right that simple blacklisting presets can be trivially circumvented; true resilience requires anticipating a multitude of attack vectors. Maintaining a robust and decentralised network naturally offers the most enduring defence against various spamming techniques.