The most important part that most commenters did not read:

"And to be clear: it checks that someone is playing, not who they are. Keep your real checks behind it."

It's just a game, not a CAPTCHA.

Both the submission title and the first sentence are: Prove you’re human by winning a claw machine.

	▲	lemagedurage a day ago \| parent [-]
		They should make it more clear that it's a concept. I could see a real version that sends the inputs to the backend where some analysis is done, but right now an adversary can just run the onVerify callback as "bypass".