Unless you work for those companies and know what risks and attack vectors they are trying to mitigate, it’s really hard to criticize their placement of captchas.