If there's a flow that a human can go through to oauth with an application, then there's a way to bypass that same flow through a bot.

You want an API because other apps are better. Let those apps partner with Twitter to allow only humans and not a second order API. If they do that, they get kicked out faster than Fortnite got kicked out. Both Twitter and the API user need to own the relationship and guarantee its sanctity so it will likely require an investment bigger than $99 to be paid by the API user (app) to Twitter.

So you will not have infinite API apps, just a few of them, those who can pay the cost of providing and validating the API.

I want to write a blog engine that posts a summary and a link to my twitter timeline automatically.

Do I have to "partner with Twitter"? How will that look?