the blog makes it seem like the bot buys access but if they are only tracking the bot via the user agent then can't i piggyback on that user agent? no ai scr

the blog makes it seem like the bot buys access but if they are only tracking the bot via the user agent then can't i piggyback on that user agent? no ai scraper is going to include an auth header when accessing your website...