Testing 17,000 domains: full bot protection dropped from 8.4% to 2.8% in twelve months. Detection effectiveness ranged 6% to 42% depending on tool. Even large enterprises (10,001+ employees) left 61% of domains completely unprotected. The numbers are brutal.