Should I use captcha in Express?

Question

CAPTCHA

This is a duplicate of a question that has long been drowned in / tmp, and remained unanswered

Hello, lately nodejs and everything that revolves around it has been interesting, so I noticed that in many tutorials on express, developers do not use either captcha or CSRF. Who will explain to the usual phpshnik/cmsnik what's the catch? I'm clearly misunderstanding or missing something.

Answer 1

In the tutorials, they obviously simplify in order to highlight the main thing. In real projects, both captcha and csrf-protection are naturally used (there are even built-in express ones).