Based on the deprecation notice at https://cloud.google.com/recaptcha/docs/deprecation-policy-mobile, "Safetynet reCAPTCHA" has been deprecated and turned off in Q3 2025. Are Android apps supposed to move to "Recaptcha Enterprise"? I migrated the client and started using 'com.google.android.recaptcha:recaptcha:18.8.0 but our backend has not migrated yet and is still using https://www.google.com/recaptcha/api/siteverify. It appears as if backend should start using https://recaptchaenterprise.googleapis.com/v1/projects/{project}/assessments.
My question is, even if I send the token from Recaptcha Enterprise library mentioned above, our backend is returning verified as true. I was expecting /api/siteverify to fail. Any reason why the verification goes through even without backend migration?