I wasn't involved in the previous website, but received this info from a colleague:
"I think that most of the spam was coming from the 'contact us' form (which does not require sign-in). We were also getting spam submissions for PADDD events, which does require log in."
The Survey123 form would be for reporting these events.