I think it should be done in both places by inserting a FAQ-link to help keep option overload down.

There are other site-wide antispam settings besides HTML in comments that could cause a CAPTCHA to be shown to an anonymous commenter, but those are less likely to be run into by someone who is not using HTML.