It's nothing to do with the software age; it's because we have so many usergroups and so many forums, and each combination has to be set separately. So if I miss something, a spammer slips though.
For example, I recently discovered that "users awaiting email confirmation" could post in one particular forum. They can't now.