I’d suggest investing quite a bit of time making sure your website is secure and steps are put in place to prevent spam.
I learned the hardway by launching a website with buddypress, within 24 hours I had to shut it down and I couldn’t define which accounts were spam or not resulting in a complete rebuild and an embarrising request for all users to recreate their accounts.
I’m using a combination of the following
– theme my login
– gravity forms during registration
– wordfence
– hide my wordpress
– akismet
– testing testing & testing
It’s yet to pass the real test when I relaunch the website.