TLS fingerprinting and Cloudflare are easy to bypass. There are lots of libraries that do so.

The application-layer stuff is harder. Each application can develop its own heuristics, and that's difficult to automate in a cross-cutting fashion.