[jerieljan]

This is three steps back, one step forward kind of an approach imho.

Easy for everyday users to deal with, and effective for verifying humans vs bots.

But holy hell, if your phone is a requirement to access sites and you have to go through the security theater like a work device and setting this behavior as a default assumption to have? Ugh. The privacy and security implications of this is quite ugly to think about too, now that Google can link your devices to a stronger degree with this approach.