Is all of this an arms race around the question "is that a human at the other end of the connection?"

And if so, can that be solved by the proposed approach of gradually narrowing the requirements for supported clients?