im sorry but you're already asking about physical presence from my yubikey why do I have to solve your self driving car wizard puzzle just to show I'm human again?
and particularly it being this mishmash of "we need to execute business logic client-side" and simultaneously "you had better not attempt to automate it"
we have a solution for that already it's called public key trust infrastructure and oh god is it awful