I work in marketing and not nearly as much effort as you think goes into removing bots. They go after the lowest hanging fruit, the most obvious bots like scrapers and crawlers but most bots impersonating real people easily make it through. Traffic is traffic.

The advertisers still pay, they just don't get conversions.