It’s not a captcha and works differently, if it were a captcha it would be a random code definitely, you are correct. The form should be secure and work perfectly fine. Please let us know if you actually incur an influx of spam getting through. Then, this would be something we would definitely investigate further. Otherwise, there is no issue and nothing is broken or in need of being fixed.