There’s also the issue that some android and iOS features don’t work on rooted, like integrity check. We implemented it to prevent some malicious actors spamming our sms services, requiring them to use actual phones to access the service.

In the end we went with a captcha because we didn’t want to exclude rooters but I can see it being a choice not all companies make.