Comment by thayne

Let's ignore for the moment that this has been reverse engineered.

If they only look at this header, then legitimate users using non-chrome browsers will get treated as bots.

If the these headers are only used for chrome user agents, then it would be easy to bypass by using headless chromium with a user agent that spoofs firefox or safari.