One last question, when we're talking about NODE_BLOOM service, are we talking only services for SPV client which use BIP 37 or including SPV client which use BIP 157 (and BIP 158 as well)?
I think no, that would mean that enabling the NODE_BLOOM service bit on a node would subject that node to the BIP 37 DOS risk even if the operator only wished to serve BIP 157 filters to SPV clients (and BIP 157 filters are not bloom filters anyway)