> even when a human visitor has their JavaScript turned off, the email address displayed on the page remains usable
NoScript on Firefox with default settings don't render <object> tags (replaces them with placeholders), so this technique doesn't work here.