In reply to Jeff Chandler.

I didn't see your response until after I replied to RT Cunningham. My Spam Destroyer plugin works around the issue you just described, by making the user answer a CAPTCHA if they've disabled cookies.