As for handling spam, yes it is a challenge but something we plan on doing to prevent spam is sending automatic authentication links to accounts we believe are posting a high volume in a short period of time. The authentication link will lead them back to a page that requires them to fill out a different captcha for each link.
Finally with regards to signatures, there is definitely OER software that exists that we can test out handling signatures and images inside the email itself.