So we have captchas already enabed and had decided to enable email verification at the first sign of bot spam. So far I don’t think any bot has targeted our instance, but if you find bot activity here in future message me or another admin and we’ll turn on email verification.