Then if those BOTS are using whatwg web engines, what are your options?

Not to mention, they could be click farms with real humans behind, then what can you do?