Thinking about this for a while, I think that the spam concerns can be offset by forcing OpenID users to have validated email addresses before posting to a community. While some spammers wouldn't be deterred by this, it makes finding the rest of them a lot easier.

But maybe even that's not enough.