That would be up to the endpoints hosting annotations. They would need to build anti-spam or reputation into their server system. Not part of the specification.