Can't a bot just collect a few real tokens and then send those instead of trying to run the shader?
How do you automate that? Just generate a new token for each day.
replay attacks are some of the easiest to automate
But each client gets their own token to solve.