Without CAPTCHA bots can submit the form and there is a potential for spam. Most likely it won't be a security issue, it just could be a problem with a bunch of garbage posts if someone tries to find a security hole and take advantage of it. I doubt they would be successful, but the tries could fill your inbox.