Fighting spam is an arms race, unfortunately, and I can't imagine how you could work something into core that works for everyone and doesn't make registration even more onerous.

We do have some good options as plugins; otherwise we'd all be sunk, frankly. :/