It's pretty easy to circumvent all those checks if you're doing normal-ish things (like doing a single series of searches to prepare to purchase a single flight) and their detection doesn't ban a large fraction of non-bot customers. Those companies might sell bot detection, but it only works against the poorly coded bots and legitimately abusive accounts (sometimes) if you don't turn the false positive dial way up.