You are very right it is pretty complex, took use time to build also and still probably a bit buggy. To avoid spam we push the nostr eventid of a project as an opreturn, that requires spending coins to make a project. Fee is taken from each funding trx paid to the projects identier which is derived from a global Angor key.

I wonder if grantless could for certain cases use @Angor under the hood? Ping me if you think that's something you'd like to explore