This is worthy of a bug bounty, and I feel it should be handled as such: reported privately to them first. The people trying to hack reCaptcha at scale are not good people.
The temporary fix Google might have to do in the mean time however is to stop all audio reCaptchas, blocking the people who vitally depend on it.