Comment by noirscape

To be fair, the sites resorting to extreme anti-bot measures are also often not the ones that are a clientside JavaScript hell.

Thinking of the most extreme option (throwing proof of work checks at browsers), the main stuff that jumps to mind is sites like sourcehut, Linux Kernel Archives and so on and the admins for all of those sites have noted that the traffic they get is far outside of expectations[0]. Not whatever blogspam ended up on the top of Google search that day.

The badly designed sites are often the ones that don't care about their bandwidth anyways.

[0]: https://drewdevault.com/2025/03/17/2025-03-17-Stop-externali...