I notice that I get some requests for the comments cgi script, but very few comments. I realized that MovableType requires comment submitters to supply an email address, so I toggled that off. Spambots are everywhere, after all.
But it should be trivial to add some encoding to the email addresses such that a user can parse out the real address, but a robot will just harvest it without realizing it won’t work.
I see that MovableType has some kind of spam_protect feature but I have no idea what it’s supposed to do.
For the meantime, I have enabled anonymous comments.