Since we do not have any captcha in core, I think we need to remove the ability for Anonymous to use the send to form otherwise we're just allowing plone to be a spam bot. Can you add that? It's just modifying that role mapping.