Bot protection on form submissions

[albinstman]

Hi! I'm unsure about the scope or goal of this project. But I think it is a good idea to add some form of protection on submit, especially on sign up. I would argue that almost all heavily trafficked websites have bot protection, although one could argue about its effectiveness. Here are some ideas that could prevent bots in order of difficulty to implement:

• Honeypot field
• JavaScript challenge (reCAPTCHA, Cloudflare turnstile, etc)
• Custom validation logic (not ideal for open source)

Again I'm not sure how far this project wants to go in terms of security and in particular bot protection. If it is to much to add for an example project, maybe a note about it in the documentation could be worthwhile?