Let me reexplain the threat model that I see. Consuming one token bypasses the need to solve one CAPTCHA. Now you have heard about people being hired to solve

Let me reexplain the threat model that I see. Consuming one token bypasses the need to solve one CAPTCHA. Now you have heard about people being hired to solve CAPTCHAs, right? Well with these tokens, every time a human solves one CAPTCHA and obtains 100 tokens, it's as if he helped a robot bypass 100 CAPTCHAs. Other example: say a CAPTCHA system is so good that only 0.1% of its challenges can be solved by a robot. With these tokens, if 100 are signed per solved CAPTCHA, then it's as if the robot could solve 10% of them. A 100x improvement.