I've never been spammed invites to rooms on matrix but then again I host my own homeserver. I did however maybe a year/year and a half ago was in some of the dev rooms in matrix.org homeserver and someone joined and spammed csam. Maybe this space could benifit from a verification system like the blahaj.zone space
But it was friday 2 seconds ago