We do have anti-automation enabled and are currently adjusting it as we’re getting in alerts. There’s currently no way of changing these policies in self-service.
If you want an additional reCAPTCHA, I think that would be possible using blocking webhooks. I think someone in the community has already done it.