The new API feeds into the same pipeline as “existing” whispers. So the new API doesn’t make it easier to spam.
You just rolled the bad luck on being a target of those whispers.
Make sure to report those accounts sending spam to help train the spam defences!