We do put a clickable mailto: url on the page as well. Unfortunately, unprotected forms get tons of automated spam. Emailing a verification doesn't work well...customers just don't pay attention to instructions :)
I just base64 encode my email address and decode it in an onload event handler. Most bots don't seem to execute JS because I haven't received a spam email yet.
