The listed techniques not only detect Chrome headless, but all custom browsers built on CEF (Chromium Embedded Framework) https://bitbucket.org/chromiumembedded/cef, such as Kantu from https://a9t9.com

If your goal is to only allow the original Google Chrome browser, that is fine. Otherwise this might cause false alarms.