Maybe you are correct, but I take it for a fact that most people will use a client and never run their own relays, so client-side would be the only option.
Clients can set their own limits not to handle thousands of comments and mentions, use helpers like PoW, and if user doesn't want to see random...