Background

From 1055 non-deleted instances:
409 require accounts to be confirmed,
600 have free sign up and no spam protection enabled,
13 have spam protection enabled with custom questions
33 have spam protection enabled with default questions

WITH t1 AS (
	SELECT w.id, s.name, s.value FROM wikis w
	LEFT JOIN wiki_settings s on w.id=s.wiki_id AND s.name='wwCaptchaQuestions'
	WHERE w.deleted_at IS NULL),

t2 AS (SELECT wiki_id FROM wiki_settings WHERE name='wwExtEnableConfirmAccount' AND value=1)

SELECT CASE
		WHEN t2.wiki_id IS NOT NULL THEN 'Accounts must be confirmed'
		WHEN t1.name IS NULL THEN 'No spam protection'
		WHEN t1.value='{"How many vowels are in this question?":["12","twelve"],"What is the chemical formula of water?":["H2O"],"2 + 4 = ?":["6","six"]}' THEN 'Default questions'
		ELSE 'Custom questions'
	END AS category,
	COUNT(*) AS count
FROM t1
LEFT JOIN t2 ON t1.id=t2.wiki_id
GROUP BY category

We learnt in T365443 that default questions do not protect users from spam bots.
We want to encourage people to change default questions to custom to protect their accounts (at least by making the questions visible) when they activate the spam protection.

Our assumption is that people don't notice that the questions can be configured when enabling the spam protection option, and that if we expand the settings whenever the protection is enabled, people will be more inclined to set up their own questions.

We may also consider other solutions (for example, forbidding saving with default questions).

Story

...