There are a few factors that still make reviews somewhat useful though. People can choose to attach their name, and if they are reputable then their review matters more than an anon account. Reviews also can only be left when there is a full record of trade having occurred, and funds have moved (verified on the blockchain), so at the very least an attacker is paying cryptocurrency fees for each false rating.
But ultimately there's a lot of work to be done in decentralized reputation. The work of projects like Trust is Risk seems promising (we've supported their efforts):