It exists for abusers trying to break into accounts with automated tools. And yes, it’s very cheap and basically is a measure that generates a lot of friction but easy to bypass.