Google can penalize you for spam comments left on your blog by site visitors. This can happen if you allow the site to go unmoderated and let the spam comments stay up. This is also true of forums where spam bots have infiltrated and filled the various subforums with spam. These sites rarely stay in Google search long as the spam content makes the site undesirable for the typical/ideal user. The key is to remove any spam you find on your site/forum/blog as quickly as possible, whether it appears in the comment section, guest book, profile page or article pages (such as if you own an article directory). You will also want to install CAPTCHA and other spam prevention mods and turn on comment moderation. An ideal way to prevent people from spamming your forum is to make it so that new members cannot leave links anywhere on the site. This will discourage spammers who won't want to stay if they can't get a free backlink. You should also use no follow tag for all links that go off site, so that if a few spam links get past you, then you won't be held liable as they won't pass page rank. In this way you can ensure your site is spam free and complies with Google's TOS.
Spam comments are actually of low quality and since you are hosting those low quality content then google can penalize your website even if you have not done that mistake.
Google crawlers can't differentiate between the actual article and the comments. If G Bot finds any bad words, "unrelated" words and spam links on your page, it thinks they have been written by the page owner.
If your blog post is good enough, I don't think a few spam comments can destroy your rankings.
You are absolutely true on this one. People who comment for the sake of commenting are more likely to create spam comments. One way to put a check on this is to administer those comments regularly. When you feel that the person who has commented has just done it to get a backlink, delete the comment immediately.