Vercel's Bot Protection is intelligent. It automatically lets good, verified bots through like Stripe's webhooks, Google Ads quality control, and X card previews (see: bots.fyi). It's really good bc… your business still works!
Reason it works is that we allow 'verified bots'. See bots.fyi for more. The screenshots you attached are bots that are pretending to be the real bots. Figure 1️⃣: X embedding my og card correctly Figure 2️⃣: `httpstat` or `curl` beind denied Figure 3️⃣: