I don’t think they actually try too hard. I have two accounts which the most trivial of algorithms would have caught and haven’t been flagged >5 years in. (Always logging in from the same machine, no cookie clearing, in quick succession).