Sure, but the challenge is how to block them without putting undue load on humans.

In the olden days, you’d just host a webserver and be done with it. Today you need elaborate setups to trick bots. It’s a losing proposition.