Let's ignore for the moment that this has been reverse engineered. If they only look at this header, then legitimate users using non-chrome browsers will get t

Let's ignore for the moment that this has been reverse engineered. If they only look at this header, then legitimate users using non-chrome browsers will get treated as bots. If the these headers are only used for chrome user agents, then it would be easy to bypass by using headless chromium with a user agent that spoofs firefox or safari.