Good call. But NIP 95 is not your main problem. I assume you know that people can do this with any event kind. If they just want to turn your server into a storage of illegal content, they have all the nips available to do so. I would target the intention, not the tool.