Exactly 
We don’t believe in making negative statements or bad mouthing other plugins, so I will phrase this as diplomatically as I can. While we were doing our research for the optimum method to kill automated bots, we of course looked at what every other plugin was doing in this area. What we found was that some very popular plugins with a lot of downloads/installations are allowing login processing before CAPTCHA processing, which defeats and negates the primary purpose for using a CAPTCHA. Instead of pointing out which plugins are “doing it wrong”, I will instead point out the plugin that we found was “doing it right” - SI CAPTCHA Anti-Spam. JTC Anti-Spam / Anti-Hacker is most similar to that plugin, but we came up with some unique new concepts and techniques to improve on what works so well in that plugin.