This is why there's the meta refresh challenge as an option: https://anubis.techaro.lol/docs/admin/configuration/challeng...

Turns out that in practice there's some bots that implement support for this but not JavaScript.