The engineering reality is that, much of the time, information asymmetry is a big help when you’re an anti-abuse engineer trying to build systems that distinguish good traffic from bad. It’s not an “undisclosed vulnerability” to build a very effective heuristic that wouldn’t be effective if it were public knowledge.

That’s the kind of thing that’s useful for some random blogger’s personal domain and largely academic at Google’s scale.

you would be shocked at how effective simple things like this are at stopping 90%+ of the bad actors, leaving significantly less manual work to identify the remaining 10%