The actual report from Arkose (linked elsewhere in the comments) is much more detailed in what they’re measuring and reporting. That said, the language around

The actual report from Arkose (linked elsewhere in the comments) is much more detailed in what they’re measuring and reporting. That said, the language around the “73% of traffic” figure is still a little ambiguous but most plausibly means “73% of requests/sessions to the significant commercial properties we studied” Assuming that’s what they mean, it’s reasonable that bots are banging on major sites three times more often than legitimate users. I think the linked article is doing the sloppy sensationalizing and the report appears to be much less so.