I think you are both correct...I've also had my email address up on my website for a while now and the only spam I've gotten have been a few targeted emails asking if they could write stupid articles for me or perform SEO for my site. Clearly written by a human, but spam nonetheless.
My blog, on the other hand, gets TONS of spam, though Akismet makes it a bit easier to deal with. Most of them are clearly bots that are being programmed to solve CAPTCHA puzzles, and they're scarily good at it. They seem to be trying to use my comments form to test their accuracy, though I don't let any of them get through. Funny that the landscape has changed so much in recent years. I remember in the past using all sorts of obfuscation scripts in order to avoid the dreaded spam, but now it seems they're all targeting social media.