How does the BytePhase WordPress plugin deal with spam on its built-in forms?

The built-in lead and self check-in forms use a hidden honeypot field and a minimum fill time of three seconds. Bots that fill the hidden field or post instantly are quietly dropped and get the same success response as a real visitor, so they learn nothing. Both checks keep working on cached pages, which a nonce-based check would not.