Effective picture captcha has accessibility issue. Setting up any simple audio captcha without resources like google makes it easy to game. Tracking user activity would be a privacy issue. How could one make accessible, privacy respecting, mostly spam free CRUD site ?