You are in principle correct, but in practice you need to account for the side channels of information as well -- does the mouse and keyboard behave like a human or a robot? Are there thousands upon thousands of sessions coming from the same IP address?
The cat and mouse game happens at every level, not just the DOM/browser-detection level.
The cat and mouse game happens at every level, not just the DOM/browser-detection level.