Well, at least thy were trying, whil other archtiects just use the rnd() function for placement:

actually it is already meged and on v16.0 milestone list

I definitively also observe the recent increase of spam (mostly on info@domain) however spamassassin (after some training) does a decent job sorting the trash out. Also I use a unique email address for each website I register, this way a lot of spam was removed by blocking an email-address I’ve used for login to facebook 10 years ago.