I've never once had this issue while I get normal SMS spam. My grandpa and wife get them though. Still trying to figure out why. I'm about to make the switch to Molly as I read you can allow messages only from an approved list of senders or something along those lines. Molly is a fork of Signal FYI, and you'll need their fdroid repo to download or get it from github
They need to offer a move away from numerical user ids. What is that called, where you can guess or arbitrarily determine something algorithmically or formulaically or like throwing a dart randomly and hitting a real identity to exploit?
Also the same deal when people use numeric pin codes. If the replay mechanism is screwed, its literlaly only a matter of time