That is why we have the minimum fee in place. It makes spam attacks economically unprofitable and drains bitcoin from the spammer.
We have run for 6 years without a fee market and no spam attack has taken place.
There's no minimum fee dictated by the protocol. You can send 0-fee transactions if you wish.
As for no spam attack, what else would you call the "stress tests" we had?