Ten minutes to implement, stops nearly all automated attacks that aren't specific to this site, much less user hostile, and far fewer accessibility issues.

Believable.