I’ve realised that the cookie plugin we’re using was set so that ‘Marketing’ cookies/scripts were switched off by default, and that the recaptcha script was therefore blocked from ever loading.
I can see that although the link to the script is present in the page: <link href="https://www.google.com/recaptcha/api.js?ver=5.2.4" rel="preload" as="script">