I know email forms are less attractive to spam bots, but that's how I got rid of a very aggressive one. Still "no-js-needed".
For comments, it would probably make sense to combine it with text length, as this would be a problem for people just commenting with a single emoji.