This is a cute "hack" for bot detection, but it's too unpredictable for the real world. Far too many users with good security hygiene are penalized by this system
Plus, this might incentivize hackers to defeat the system by logging into and using email accounts pwned in these breaches.
Plus, this might incentivize hackers to defeat the system by logging into and using email accounts pwned in these breaches.