Small nit:
For v3 Recaptcha Google recommends enabling the tracking code on EVERY page load, not just ones you want to protect. This enables Google to create a traffic profile. e.g. if a customer has been shopping the site normally but then submits a contact us in a suspicious way (e.g. did a copy-paste autofill which was very fast) Google takes into account the non-spammy behavior beforehand.
It looks like your module only loads on the hooked pages, I suggest loading the tracking code on all pages following Google's guidance.