Today when logging in to Atlassian (id.atlassian.com) no Captcha validation is required, unless after a few failed login attempts.

It would be great, security-wise, if Organizations would be able to make Captcha validation a requirement for managed accounts or when accessing a Cloud Site. 

Can this please be analyzed?