I think party has already implimented captcha authentication. There are other ways, like running processes, mouse heuristics, and other countermeasures that we probably don't know about.