I brought this up to the Mastodon team (no response yet), but I wonder if the solution, at least a temporary one, to the problem where people get harassed with followers-only posts that @ mention them, thus hiding these posts from public view and moderators, and allowing the abuser's followers to pile on, could be as simple as allowing to filter out such notifications.