Or hook Groups up directly to whatever spam filtering mechanism Gmail already uses. No idea if the architecture makes that easy or not.