The captcha at the end of it is in plain text. You can copy-and-paste it directly into the text field. Worse than that, it's set in a hidden form variable, which strongly implies that you could set it to be anything you want. Basically, it completely fails to provide any of the bot-protection that are the entire point of captchas. (Not that they actually work all that well at the best of times, but that's another issue.)
no subject