>This can be mitigated by placing CAPTCHAs only on signup/login and comment forms.
If only...
Algorithmic turing test is a more interesting problem. https://xkcd.com/810/
Traditional captcha solving ability has already been surpassed by the bots which is now why there's so many new and creative different CAPTCHAs. Until someone trains a model to solve them that is.
It's a never-ending arms race. CAPTCHA services are improving just as the attackers are. Just because they're not 100% accurate or effective doesn't mean they're worthless. They're just the first line of defense.