[SweetSoftPillow]

The most important part that most commenters did not read:

"And to be clear: it checks that someone is playing, not who they are. Keep your real checks behind it."

It's just a game, not a CAPTCHA.

[rendaw]

Both the submission title and the first sentence are: Prove you’re human by winning a claw machine.

[lemagedurage]

They should make it more clear that it's a concept.

I could see a real version that sends the inputs to the backend where some analysis is done, but right now an adversary can just run the onVerify callback as "bypass".