If you would block the analytics script for a user that normally have it enabled, that looks fishy to our detection. We don't (only) compare the collected data with known fraud profiles, but also with how the current user normally accesses the service.

Easy to circumvent by having it push data through the backend