So stupid anti-spam measure — email addresses as image — led (indirectly) to such huge vulnerability.
Using images as anti-spam measure really gives you a lot more problems than benefits (except you'd use random single-usage addresses).
Don't obfuscate, but fix your spam filters or switch your email provider. What helps a lot is server-side moving of detected spam emails to your junk folder and looking through this folder from time to time.