My threshold sweet spot is 0.3. It will still block some customers, but no spammers. Sometimes, when I ask them to try from a different browser, it can pass the reCAPTCHA test. I would live with it and deal with the occasional reCAPTCHA failed issues. If anyone has a better solution, please let us know. Thanks.