If you've got an authenticated client, that will resolve 3rd party clients, so reflection bots become impossible to use.

That's not true in the slightest. How would this stop a reflective client from posing as the authentic client? I personally wrote a reflective

And if you're using osrs official client with certain runelite client features inbuilt, graphic bots won't work, if you knew what you were talking about you'd know they literally don't work for osrs?

Despite the fact that the official runescape client uses the CPU instead of a graphics card, there is still a graphics data being written to a buffer. So yes. You could still read graphical data from the original client.

The only recaptcha solvers are open source and work with browsers with editable text. They simply cannot work with an official client with locked coding. So no, my point stands lol

Not only is it patently untrue that recaptcha solvers are "only" open source, it's also untrue that they only work with browsers with editable text. It might take a little bit of work, but I can all but guarantee you the code doesn't mystically stop working the instant you try to apply it to anything outside of a web browser.