1) people have large databases of user information such as membership numbers and passwords, no AI involved - just brute force!
2) the company have a legal duty to protect your data and the data of those who use the system
As annoying as CAPACHAs are, they are rather necessary in this day and age