Seems like an issue for virtually any website that allows user posts/uploads? Or do you mean that the federation part makes it more vulnerable to spam? Corporate sites like Reddit and Instagram just have the money to hire lots of admins to keep on top of it.