1) Thank you for fixing a posting. Not it is possible to post without JS, by entering CAPTCHA in all caps.
2) cf doesn't show [email protected]. not a big deal but just small issue. also I'm not sure how CF protects from spam or shitposts, and since when spying == protection.
3) regarding latest spam shitpost. all boards, forums, across web2.0versering are vulnerable.
Solution? premoderation