What specific security measures can be configured into FormToMail, that prohibit exploitation of forms by spammers and robots?
To increase the security you can put the delivery email address into the PHP file and remove it from the hidden field. You will find details on this FAQ entry. Additionally, if you want to prevent automatic submissions you can add a security verification image (captcha) into your forms. We have a captcha extension here.