Basil - I get 10 attempted signups every day from spammers - but because everyone has to verify their email, none of the spammers get onto the forum - as they all seem to use invalid ones.

Of course that is no guarantee of not being hacked, but they are likely to do that without loggin on.