But then whoever added them to the IDP becomes accountable for what the bots do.

By hijacking a real person's credentials, that person becomes the accountability sink. Very neat. Very deliberate.