I'm surprised this works at all. What sysadmin is so naive to rely on the Googlebot useragent?? Doesn't everyone fetch the official list of Googlebot IPs and

I'm surprised this works at all. What sysadmin is so naive to rely on the Googlebot useragent?? Doesn't everyone fetch the official list of Googlebot IPs and then add those to a whitelist?