That’s gotta be a large part of it. 5 years ago, most bots used true user-agents to identity themselves. Today, on my work sites, about 98% of bot traffic (traffic coming from data centers) use slightly out of date Chrome user-agents. So we just block all data centers.