The "I am not a robot" check is enforced in JavaScript only; the server accepts any POST. Bypass the on-submit check (or curl straight at it) and the subscribe still lands.
RATBOT