The blockchain has a minimum SP requirement for each account (currently 10 STEEM, controlled by witnesses) so creating many, many accounts would be expensive. The other deterrent is downvotes which make it less likely the spam will even be seen much less upvoted. The web site could also employ other measures, but I have no idea what they have planned if anything.