The answers here seem to establish that some frontier models can read it sometimes, but only after tremendous compute.

That still makes it (well, a future version) potentially useful as a captcha if we hate our users but hate AI more.