I do want arbitrary people to reach out to me regarding my home page, so any just-allow-whitelisted-messages proposals are useless in that regard.

And in practice some minimal address obfuscation has been enough to block any address harvesters, and setting up a contact form or something comparable (and I guess especially also subsequently keeping it spam-free!) would have been much more of a hassle.