Cookies, maybe? Which would be indistinguishable from a normal usage considering its making the same API calls. Better safe than sorry for important accounts, but if they could catch you en masse for YT-DLP use they would have already.