3 ms·

Time-based codes (TOTP / RFC 6238) can be completely automated, that is not bot prevention by any means.