Does the PAT implementation still require that the page content is being rendered live to a human user, or not exported or something?

(I know web APIs can't directly prevent those things, but they might be able to let a site determine whether a user is doing something to prevent CSS or Javascript tricks from preventing them.)