I'm setting up Firebase App Check in my Angular app, with reCAPTCHA v3 for attestation. App Check token TTL is 1 day. It's working OK, but I'm not sure what to use for

isTokenAutoRefreshEnabled

If this is set to true, doesn't that mean there are requests to reCAPTCHA that aren't related to a user action and so run the risk of a low reCAPTCHA score and therefore requests being blocked?

If it is set to false, my understanding is that a new App Check token is requested at the time a request to a resource is made, and therefore the only risk is one of latency.

Can anyone shed a bit of light on this?