I think you need to rely on ai spam detection (or maybe try moving detection upstream to the mail receiver if you’re really clever).
I bet (but don’t really know) that the stuff that lets email in with staged users work bypasses some normal stuff.
Do you not have the ai spam detection set up?