It would be good to have the email addresses in mailto-links encypted/obfuscated so that is harder for spam bots to detect them.
The following behavior would solve this:
A regular mailto-link
becomes rewritten to the following snippet, which is not machine readable anymore:
javascript:decryptEmail('dGVzdExEfKLAdeLmNvbQ==');
Also the javascript decryptEmail function has to be implemented and in the best case their is a configurable salt for that which is configurable or autogenerated for every community instance.