In addition to what has been stated under the proposed solution above, scam/spam prevention could be achieved by implementing allow and block lists.
Btw, the nature of private messages is such that users themselves are responsible for moderating them, given the appropriate tools, so no additional labor on the part of Itch staff is needed, nor expected.