Well - spamming began again this morning after the configuration reload - seems like the syslog-ng config change was overwritten (as is normal for config changes not made through the UI).
I must have been mistaken about something yesterday - I thought I confirmed that the edit of the config file survived a reboot - but it doesn’t today.