This is a really interesting writeup - but something I think a lot of people underestimate is how often these turnstiles are implemented improperly which then makes it pretty easy to spoof / bypass them entirely?
Curious if there's boilerplate provided by cloudflare or a third-party for common JS frameworks like Next and React? For instance, starting very basic like "protecting a web-form submit button / route until the turnstile passes"?
