This may be due to moderator inaction.
I moderate an Apache project mailing list and the amount of spam it receives on on some days is silly. However thanks to the good work done by the ASF infra team it takes very little effort from ML moderators to keep the spam from reaching subscribers.