Protected registration

Running a public community site opens you up to spam attacks and malicious users.

How can I protect the site against this?

After reviewing available modules, I'm going to try Turnstile by Cloudflare.

They offer a free tier, and I trust that they have the traffic data to block bots.

I don't think the basic captchas like math or questions work any more with AI bots.

I'd like to find a community manager to review and approve registrations.