The input of a captcha happens client side in the form, so we cannot check that.Well, these bots use programs to bypass the Captha, so perhaps there is a program that detects this and applies an auto-ban.
And we can regex check new threads for anything, so I can add for example URLs to the regex check.
They will come up with new URLs anyways, so it doesn't really help that much.