Commercial edition: local arithmetic CAPTCHA enabled by default for new installs and mobile API; weaker than third-party CAPTCHA.
