source: I work in a team that uses this kind of bot detection and yes, it works. And yes we do our best to keep false positives down