Friends and family, sure. But why should a random stranger who has never contacted me before be able to place events in my calendar without my consent? Why is that even the default behavior?

The easy fix would just be to change the default behavior to not showing invites from unknown addresses.