Not really sure what else they can do, between people running residential proxies (embedded in cheap games or for a tiny sum of crypto) on their phones at home, making the source of the traffic indistinguishable from legitimate traffic, to ID verification check completion as a service in low-income countries, there isn't much they can do to block it.