I just noticed this and would have replied sooner if I'd seen it. We do use captchas sometimes for logins, especially when HN is under some sort of attack, which happens periodically. But we try to minimize it.
I'm told that hCaptcha would be better than you-know-who but haven't had the cycles to look into it yet.