This is an option which You control as admin
Administration Center - Permissions
Anybody
Registered Users
Registered Users with email confirmed
Experts, Editors, Moderators, Admins
And in the SPAM Section You can choose
Use ReCaptcha if Email not confirmed
monk333