Well exactly, you're a low value target, a 0$ value target, a bad actor would actually loose money by trying to spam you, so of course no one even tried, but yo

Well exactly, you're a low value target, a 0$ value target, a bad actor would actually loose money by trying to spam you, so of course no one even tried, but you could be spammed to death in less than a hour of work >If your forms are juicy goals for targeted attacks this might be a different matter, but how about just paying a bunch of devs to program it for your state and open-source it? Because it's a really hard problem and it would cost a lot of money while probably not even being really effective, and reducing your revenue at the same time because your UX is probably a lot more terrible than the existing solutions? +BTW the captcha in recaptcha is not even the main value of this service, the main value is the bot detection algorithms that run before/during/after the captcha, which gives you a "human/bot" score before you even filled the captcha Good luck reproducing that in every company that needs it. It would cost a ton of money with really lame results most of the time