Ok, it is a little bit difficult to full understanding the unsafe validator.
Like gmail, if you have tree or more unsuccessful login attemps a captcha appears