I'd be interested in how anyone could defend that silently discarding email after "after accepting the e-mail for delivery" based on a defective filter is acceptable behaviour.
If storing vaguely suspected spam is intolerably expensive then maybe just keep a list of discarded messages (sender, title and date). At least users can see what's happening.