I get 401 errors all three time, because I use web browsers that don't leak enough personally identifiable information to prove that I'm not a robot.
Of course, using an oddball browser in and of itself is easily trackable, but that's not what the bot-detection software is looking for, so it defaults to assuming I'm a bot.
Likely you just use a shit web browser.
cloudflare browser run, superb. no captcha.
i can let opencode merrily browse the web and it doesn't get stopped. a bit like a drug mule bribing the cops.
every time there is a captcha it makes you authenticate. so it's the same thing as the captcha.
maybe i have it misconfigured