That is still more of an ask than what most IoT volumetric attacks can do. It’s like saying Turnstile is bypassed by paying a human to do the captcha.