Blame AI.
Everybody that I know who has implemented Turnstile (or similar things like Anubis) has done so because they are getting absolutely pounded by bots scraping content to feed their LLMs. Reasonably-well-behaved bots used to be 20-30% of my traffic, but that's surged to over 70% recently. Several of my sites were DOSed on multiple occasions until we got Turnstile setup.
Like almost everything in the US, it's up to the state. New Jersey has annual inspections, but other states I've lived in don't.
Of course people just starting their careers shouldn't ask their parents for career advice — it's very unlikely they have relevant, current knowledge and much more likely they'll draw from 20+ year old info that worked for them.
That said, parents are great for doing a "smell test" on an email, a resume, on an outfit, or on anything really. Hiring managers are likely to be closer to parents' age, so it's good to get feedback. Parents are also going to have much stronger professional networks that can help even if you're in an entirely different field — colleagues' spouses might work in the right industry, or someone else might have a good connection. Just a small example that happened to me recently — my daughter was on a group trip that was getting screwed by their hotel, and one of the parent chaperones happened to be an ex-VP of a credit card company, and could make a call to the right person to get the problem resolved.
In short, think carefully about how people can help you and have an open mind about things they might know or connections they might have — you might be surprised.
FWIW, we tried fail2ban and the bots circumvented it in days - instead of dozens of requests coming from one IP, they went down to one request from each IP, and swarms of IPs coming from all over the place (not within an easy-to-define CIDR range).
The first thing that's been effective for us is Turnstile. A colleague of mine wrote up a general approach in Rails https://ancillary-proxy.atarimworker.io?url=https%3A%2F%2Fbibwild.wordpress.com%2F... and we wrote up our version of that using Trafik https://ancillary-proxy.atarimworker.io?url=https%3A%2F%2Fgithub.com%2Fpulibrary%2Fp...
No directory.