Honestly, not all that bad. A lot of the spam is just the stuff from companies we gave our email, y’know, the usual.

There’s the occasional spam/scam email, every few days at most, but it’s pretty ignorable.

(we did set up rspamd purely for DKIM signing, and it might be filtering our inbound email, I don’t know.)