Is it fair to say that, with current version of kratos, to enforce captcha would require intercepting calls to kratos by another service?

Hello Eric, I believe that is the case at the moment. Also see this issue: https://github.com/ory/kratos/issues/138 We are looking to start work on our side to implement these strategies soon.

Thank you Vincent