Most CAPTCHAs are already solvable automatically. Usually there's a rate limitter as a second line of defense, and also some heuristics that detect bot-like beh

Most CAPTCHAs are already solvable automatically. Usually there's a rate limitter as a second line of defense, and also some heuristics that detect bot-like behaviour (user keeps upvoting posts of certain users without even reading them and uses API in a otherwise non-standard way? Hmmm, throw more CAPTCHas at them and ultimately ban them). Finally, recaptcha and (probably cloudflare's captcha?) tracks wayy more than just how correct you are in recognising street signs, and correlates this to your overall network activity. You can't rely on just CAPTCHAs anyway, because mechanical Turks are too cheap compared to the damage they can do.