Yes 'some' Hackers/coders can code around things like adverts and captches but it depends on the algorithm, encryption key strengths, chains, implementation blah blah etc. etc.
For example you cant bypass a verification algorithm that ask's you to enter your password to authenticate card purchases, its mandatory before they can take payment, or the algorithm they use when you 'have' to log in your second set of passwords to proceed to your online bank account.
For these types of secure algorithms no weakness has been found, this is NASA/NSA type level stuff.
Its all about the 'algorithm' they need to put in place, to enforce something like this.
As long as they do something to slow down bots from from instantly carting items, that's enough for a human chance.
Not something laughable like Nike did before, were you select said item, THEN do a verification picture test...
That's just idiotic since the whole point of a bot is to cart items first, not to mention the obsolete encryption used on their picture verification process that makes it easy to bypass.