I've seen a certain commercial renter with many, many reservations used as an example of bot behavior. The problem with your theory is that (1) a bot can only pretend to be a member for one reservation at a time. So, it can snag only one hard to get reservation per day . And (b) the number of points a renter would need would to book that many reservations is more than any one member can have.
So, either a commercial renter has direct access to multiple high point contracts to run the bot on, or they are sharing the bot with their members who then book the reservations. If they are asking members to install a program or run a script it would have gotten out by now. In addition, DVC has cracked down on commercial rentals in the past and someone using a bot to book hard to get reservations is a poster boy for commercial renting. There would be no way that a 8k point owner running a bot on their account for rentals would escape DVC's attention.
To add, we have to remember that each membership is legally its own. So, when they review or flag accounts, its going to flag only a membership, on its own, that appears to be doing something to question...which, the only threshold we have is from 2007...flags memberships with 20 or more reservations within a rolling 12 month period.
Now, once those memberships are flagged, there is nothing stopping DVC to dig further to see what is happening on those. But, an owner with 8000 points, even if the owners are LLCs, businesses, trusts, etc. do not have to own them all on the same membership.
Each new UY is a different membership...so, if we use the 20 reservations limit as the trigger, it could be pretty easy to get around DVC flagging you as long as you keep each membership under the threshold. For example, I have three UYs, so if I rent 10 on each one, I am at 30, but DVC is not going to see that because it won't flag them because I didn't hit 20.
And, I am still not yet convinced that DVC has the ability, legally, to enforce rules against multiple memberships owned with some of hte same owners, if, individually, each one is being used within the personal use guidelines...again, question for a lawyer who specializes in contracts and timeshares.
So, we come back to bots being able to grab a hard to get room and I know that the system does not allow more than one room to be booked on the same time on the same membership...I tried it with me trying at the same time my DD tried under her log in. One of us always got shut out when it came time to confirm.
That indicates to me that anyone who may be using them to grab rooms, would have to have multiple people doing it on multiple memberships at the same time, and if we are talking multiple memberships, then, as far as I know, DVC sees them as that...