A βgeneralβ spambot that triggered events to collect email addresses would have to push the page into a mostly dumb browser, somehow determine what might be JS-confused email content, and then blindly try to mimic user interactions that defocus interesting data.
This is a huge job that may not be of any use, and the spammer will never think about it.
What would they do if they were really interested in collecting your site, it turns out how your protection works (hey, it's just written in the opposite order), and only in a special case, a spambot to unwind data manually.
This type of protection scheme should be more than enough if you are too small to be targeted, but the disadvantage is that visitors to the site who do not use JavaScript will be difficult.
source share