I understand that your team chose not to pay for reCAPTCHA Enterprise and switched to Cloudflare Turnstile instead.
However, Turnstile is very easy to bypass. I personally created a browser script that can register an itch.io account every 10 seconds without any limits.
Because of this, it would be better to switch to a CAPTCHA service that enforces real human interaction, such as hCaptcha, which offers a free tier and provides stronger security.