"For distorted text fields, humans took 9-15 seconds with an accuracy of just 50-84 percent. Bots, on the other hand, beat the tests in less than a second with 99.8 percent accuracy."

I'm guessing part of the answer is (and most likely already implemented in things like reCAPTCHA) is rate limiting and detecting bots when they solve these too quickly.