It could be done in javascript at the time the user logs in.

Also, protonmail can see the contents of the email "in-flight", so they could filter spam at that time.

I've only used protonmail briefly and didn't notice any spam filtering features.