How do you protect a web form from spam without a CAPTCHA?
Answer
Hide the form by avoiding the FORM tag, then require a one-time cryptographic token fetched just before submit. I have run this since 2016, and by 2022 it had handled millions of messages with fewer than 100 spam.