Unauthenticated feature-request/ticket widget with spam protection for Supabase

Looking to add a feature request/ticketing type system into my Saas. I use Supabase and want to know the best way to stop the endpoint being abused by spam etc. (users of the widget will not be authed) Im using a table with RLS, but can see people talk about edge functions but im not familiar with them. Any suggestions, ideas, help?