> A good start to this would be making the code FOSS, and allowing webmasters to self host it, rather than relying on Google’s black box proprietary cloud services.

Clearly, this could never work. You'd be giving the bot makers a clear and testable recipe for bot detection.