You must log in or register to comment.
This this the relevant discussion and dialogue surrounding the direction they went to keep it self hosted and open source.
I think it depends on the server version for each instance. 17.4 has a crappy captcha. 1.8.0 has none because it was crap and easy to bot. 1.8.1 isn’t out of testing and I haven’t interacted with that yet.
Edit that being said, manual sign up approvals and email verification are helpful tools to combat this.