I get captchas when trying to do google searches if I'm not logged in. Or a lot of the time its "please wait a moment. Don't refresh the page" (the google results will then never load until you refresh the page). A few weeks ago I couldn't get past a cloudflare checkbox on a modern iPhone, and I'm not on a VPN or anything either. Yesterday I tried to visit an old reddit thread I had bookmarked and got "You've been blocked by network security," without a chance to even attempt a captcha.
What are bots doing to get past all of these?