Don't forget if you're on a TOR like browser, you can get a piece of code at the end of the URL that overrides the need to endlessly Captcha / click on a blade of grass or a puff of smoke etc. when logging in.  You should be the only one that has access to that unique URL.

Kind of like a lite version of 2FA (kind of)