All of my clients have tied the MQL lifecycle stage to lead scoring, so they only become an MQL when they reach a sufficient score threshold by interacting with marketing assets.
Do your forms have a captcha field... that's one way to block out junk. I would also add fields that bots can't submit (custom questions, etc.) and HubSpot has recently rolled out a spam feature for forms, though it might still be in beta
