How robust against spam should side projects be?