Privacy nightmare aside, is it just me or does this sound a lot less secure than the find the bus bullshit they do now? Seems like it would be much easier for a bot to generate a realistic looking hand wave than interpret increasingly obscure photo puzzles.