Anyone can generate a public/private key, it’s not linked to a client

Captcha can be broken, unfortunately. I’ve worked at places where we automated processes that would move past Captchas with much ease, in order to scrape websites.