Comment by dewey

This user agent could just be set to the official client's user agent and nobody would see a thing, this is a free text field basically.

Then it would be more of an exercise of finding clients behaving in an odd way that's not mapping to an official client. That's way harder to detect though.