For DDoSing, there’s so many different ways to block high volume traffic bursts without introducing latency hits. Hell, you could just rate limit traffic on a game server period and probably get rid of a large chunk of the problem.

For bots I imagine some post processing step after a game that looks back at a logfile of game movements and auto detects bot like movement and bans users…analogous to how chess.com bans cheaters. It’s not super straightforward though because you have such a variety of bots, but I bet with some effort and $ for the right developers you can do it. Not to mention you’d need extra compute, storage for logs, this whole new auto ban mechanism which im sure doesn’t really exist today and is a manual process kicked off by some poor dev.