Most anti-bots will send other browser characteristics as well and can detect if one is lying about which browser, and even which version they're using based on which APIs and properties are/aren't available.

see: https://blog.castle.io/anti-detect-browser-analysis-how-to-d...