They do but it's largely useless against all but the most unsophisticated of bots.

It blocks the most egregious and give a bot score that you can use to get more aggressive at the next layer. That score seems to miss a lot of bad traffic, making it not very useful in it's current state.

Some of the bots I see use residential proxies, rotate IP address, countries, as well as fire-up a real browser.