[meowface]

True, the attacker is much less likely to have anywhere near the funds of the target, and they don't want to hurt them.

Regardless of the actual price multiple, it costing anywhere near the price to serve as the price to solve just seems to defeat the point. Really, it costing any money per captcha served just punishes sites that happen to face a higher volume of bots, even if they're a small site. It's just going to push the company to switch to a different captcha service, which may be even cheaper for attackers to solve.