Thank you for the fast release. May I offer another suggestion? Most of the bot submissions have g-recaptcha-response set to an empty string. We don’t need to verify with Google to know it’s invalid. If we add a check for the empty token, we save a call to Google and also avoid filling the error log with repeated bot submissions.