It's not a protocol requirement. Just was an anti spam measure on Bluesky pbllc hosted pdses. Replaced by captcha