The answers here seem to establish that some frontier models can read it sometimes, but only after tremendous compute.

That still makes it (well, a future version) potentially useful as a captcha if we hate our users but hate AI more.

Every single on of those answers I've seen _says_ they did decode it, but each and every one of them only found the decoy message without even realizing it.