It's been a while since I traded with open time. When I put in a request, it doesn't ask for me to put in a code. When did that change? Is it still "bot proof" if we don't have to put in the code?

It changed maybe 6 months ago.
It never was 'bot' proof.
The codes were too simple and too easy to hack.
Actually gave the scammers an advantage, but let the masses feel like something was being done.