I mean, the point of Twitter's statement is to try to bound the risk. They could fix their methodology, or their advertisers could sue them for charging them f

I mean, the point of Twitter's statement is to try to bound the risk. They could fix their methodology, or their advertisers could sue them for charging them for bot views, and the magnitude of the risk is ~5% of their mDAU, according to Twitter. A company with 95% of its revenue coming from bot-clicks and a company with 5% of its revenue coming from bot-clicks might make the exact same amount of money, but one is substantially more screwed in the future.