It blocks the most egregious and give a bot score that you can use to get more aggressive at the next layer. That score seems to miss a lot of bad traffic, making it not very useful in it's current state.

They do but it's largely useless against all but the most unsophisticated of bots.

Some of the bots I see use residential proxies, rotate IP address, countries, as well as fire-up a real browser.