I have never seen a captcha (much less a third-party service one) on my bank website. And the day I do is the day I walk into a branch and demand all my accounts be closed on the spot so I can take my business somewhere else. I understand the fear, but if the fear comes true, then this is a hill worth dying on. Be prepared to fight. We have to fight.