The point is that people think that it’s effective. It’s the illusion of security, which does actually keep some of the more stupid spammers and bad actors at bay. It doesn’t stop the ones that are determined though, nothing does.