CAPTCHAs are going to get much worse before they're replaced by account paywalls or remote hardware attestation.