Exim and Spam Filtering

for years I've been using Exim as MTA. I had three strategies to prevent Spam. First of all blacklists. The second was to delay the mail delivery and the third was SpamAssassin. But this year, more and more Spam got through the filter, IMHO the spam is sent by hacked servers / accounts. On the other hand, I hear from customers with a firewall subscription like Sophos and WatchGuard, that they have almost no Spam any more. I also tried to adapt the config and switch from SpamAssassin to RSpamd, but instead I got more and more false positives. I also tried the methods, described on the Github Site of exim: https://github.com/Exim/exim/wiki/SpamFiltering But most of the information is outdated. Can some one tell me, what's the 2018 method to get rid of Spam with Exim?