Many merchants, including myself, have had captcha enabled the entire time. This is NOT a solution.
The only effective method of preventing ACs and completed checkouts by these bots is to disable any $0 products (as hidden prods, protected prods, & prods w/o add to cart buttons remain affected in stores with blocking apps and captcha).