How to secure createUser

I’m wondering what would be the best way to prevent a skilled user to bypass password complexity check or a bot to bypass chaptcha check. If i call Accounts.createUser from the browsers console i can create an account no matter the restrictions in my sign up form.

You’ll need to use this server-side.