Lead capture form accepts obviously fake emails

The name+email capture takes 'a@a' and 'test' without complaint. Getting junk leads with unusable emails. Needs at least basic email validation before it lets them through.