[xeeeeeeeeeeenu]

There are bot identification methods that may produce lots of false negatives, but zero false positives.

Simple example: no legitimate user has "GPTBot" in their user agent string.

[Aachen]

Ah yeah, that's a good example

It'll still trickle down to people using the system and waste people's time (from development to the people working to produce all the things used by these companies and mopping up the impact this has to eventually the users) but that would definitely resolve one of my concerns