I bit the bullet, wiped the userbase, installed a spam filter and enabled commenting.
If this doesn't cause me a crazy amount of extra work I'll leave it enabled, otherwise I'll shut it down.
You'll need an account to comment. Accounts need to be approved individually so there may be a delay between your request and my approve/deny decision.