Modern automation is better than old headless stacks, but it still has to behave under pressure.
Static checks are not enough
Single JavaScript properties are easy to patch. Stronger detection looks at execution timing, API consistency, and session behavior.
Challenges reveal coordination problems
Automation often struggles when a challenge requires browser work, server reconciliation, and continuity across several requests.
Measure before blocking
Every indicator should be tested against known automation, clean browsers, and degraded real-user environments before enforcement.