I can understand their value if someone or something is trying to register, but can see no point when someone is trying to log in with both ID and password.
Bots are not that clever, are they?
There are better way to do things... but obviously the mods chose the easy option with the quickest implementation time.....