What could the logged in Spammers ( who filled the captcha once to create the account and email verified) do with the search option? DDOS the system with search queries?
1. Please replace google recaptcha with something non-google. There are many opensource libraries out there which can provide captcha without relying on google servers/services. ( we live in post 2013 era )
In the last days i was reporting various spam on TMO. Always it comes from new member with one message. It seems that they found a way to pass the captcha