Shortcode integration clarification please

Hi,

Thank you for making this plugin available!

I’m testing out a custom form. Your documentation says that Turnstile cannot be used in a custom form as far as I can tell. Is that right? But I also find reference to the [simple-turnstile] shortcode in some of the forum posts. So I’ve tried…

…adding this to the head of my custom form’s page:

<script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>

Then I put this before the Submit button:

<p>[simple-turnstile]</p>

With those things in place, the turnstile widget does appear, and verifies that I’m not a robot. But I’m guessing that it is not doing anything protective, right? In other words, it wouldn’t keep anyone (or any bot) from submitting the form even if they fail the test, is that right?

And still no “simple” way to integrate it with the (custom) form either?