We've recently seen serious spam attacks against Matrix, so we're introducing Policy Servers to recommend whether servers should accept or discard events *before* they get synced to clients. If your server participates in public rooms, see https://matrix.org/blog/2025/04/introducing-policy-servers/ to keep it safe.