Fixable by editing phpBB’s code. I did that myself since I hate the delay, too.
I never used punbb, but phpBB is only as secure against spam as you make it. Don’t allow guest posts, turn on email verification. You can even install a mod that requires image verification. There isn’t any bugs, I know off, allowing people to by-pass any of these features.