And I run #nostr-relay here locally (a Python script). Are the default safe enough against spam?
Hmmm, which defaults and which python relay? Depends on the popularity of your relay but generally speaking there are no out of the box default spam filters.
1