Unless I've missed something, there doesn't seem to be any way to disable an email being sent to the user once they've submitted the form. It would be helpful if there were a toggle to enable/disable the autoresponse email somewhere inside the admin page. I've tried unticking a couple of things to disable it, but it's still sent anyway.
Even with reCaptcha enabled, there can still be spam mail generated, meaning that anyone can abuse the system and autosend nonsense to any legitimate email address as-entered into the form - where the end-recipient would not be the true originator of the submitted form request.