it's also important to note that the attack can most effectively be mitigated by clients implementing outbox model
and on the relay side, paid relays that focus on only accepting events from clients and their immediate follows - free relays are ded, this will become obvious in the next year