A bit issue I see with Discourse.. is the ignoring of the ability to use CloudFlare Turnstile in it natively. It is honestly one of the better solutions for Captcha I have found, and I run a paid forum script that uses it and gets very little spam in on it, even thought I get a lot of new user sign ups. Most of the junk ones are caught by Turnstile.
I really don’t see why Discourse, after all this time, has not enabled the offerings that are out there into the core yet.