GDPR could be a concern if you are not able to opt out of automated processing. Deciding if you're a spambot or not is a huge decision for a robot to make.
To be fair, any captcha would have this trouble, but an entirely invisible one would not be able to be questioned
To be fair, any captcha would have this trouble, but an entirely invisible one would not be able to be questioned