@gb An sbot form would work, but how would you reply unless they spin up an sbot identity?
I think you gotta make people aware that they're using a distributed social network to contact you and make it clear they need to keep their public/private key to be able to receive a reply from you.