It might actually be more difficult for spammers to snag addresses from the vCard than from a plain HTML page, since vcf is a much less common format. All the same, it'd be nice if the "mail-proxy" feature were enabled, since it's really a good solution in that it doesn't expose your address publicly at all (but does generate a real e-mail - the recipient, only, then sees your address and can reply).