Good question. I've used it for years and always assumed it works. If Google bots can execute javascript, spammers can probably do it too. My only hope is they don't want to do it because it's resource intensive.