That could be circumvented rather easily I guess, by using a non-headless (head-having? head-full? headed?) browser instead. And perhaps adding some random human-seeming delay in interactions.
And maybe, but that will make enduser suffer more (as always), as more false-positives will be caught.