I just hit an "are you a bot" captcha screen on mojeek. At first I was shocked that mojeek, beloved search engine of the privacy crowd, would go down that path: Blocking people who use VPN and a minimal-fingerprint browser just because. However, reading the footnote and digging around a little, Mojeek seems to use Altcha, which can be self-hosted without any external calls or data sharing.
https://altcha.org/docs/v2/sentinel/features/threat-intelligence/
While I can't say I identify as a threat quite now (to Mojeek, anyway), I can see how adding a little friction for the bots and scrapers out there can be a good thing for the web overall. As long as this doesn't happen on every second search and as long as the data stay where they belong, I'm chill with it. Peace out.