The answer is there is no way in principle to know for sure if bots are running the World on the client side or humans.
YouTube has the same problem, and they have not solved it. It is a perennial problem for any site with view counts, run counts, "likes", and so on. In general, run count cannot be taken as gospel.
Too many runs by the same client in a short time will trigger our bot checker. The runs will still work, but the run count will not increase.
Using a bot to try to drive run count is against our terms and may result in suspension.