Thanks for the note!
I just ran a query, and 93% of email signups on Postcard have completed the email confirmation step. A quick look at the incomplete signups shows a lot of obvious fake emails, too.
I'm trying to minimize my reliance on big tech, so I want to avoid Google's captcha product. But, hCaptcha and Cloudflare both seem to have more privacy-focused alternatives that I'll check out.