[aahhahahaaa]

Yeah you have to assume that if a user can input anything, someone will use it to spam. Text, photos, video, audio... literally any form of user input.

[Avamander]

I've recently started getting spam via various service providers' password reset e-mails.

"Hi buy this pill quick and cheap from http://here*, you requested a password reset"

Hhhhhhrrrrgh

[aahhahahaaa]

Oh wow that's even better than analytics referrer spam.

[quickthrower2]

I suspect there are bots that go looking for forms to fill in without knowing what the context is, i.e. they'll target anything with an input tag.