Comment by gruez

>CAPTCHA for login should just be outright illegal

How do you prevent credential stuffing attacks?

>especially if it blocks important functionality like closing your account.

That just falls under standard tort law, not to mention recent "click to cancel" legislation some states have been introducing.