If so many websites use them, then it’s not completely useless. Besides it’s better to have them, rather than not having anything. Right now anyone can write a script to continuously attack the wiki. Even if a CAPTCHA can be bypassed, it makes attacks more complex and will filter out a large percentage of bots, which is better than nothing.