Can we get some answers?

Then force registration e-mail validation, bots can't register... yet. E-mail verification is an additional measure but not a necessary one at this time.