Because we're accepting failure on that front. Instead, it's providing rate-limiting.

Hell, charge me one penny per refresh and a dime per tweet and login attempt. Then let the bots run freely if they're willing to pay that rate.