> Checking user agent doesn't meet the requirement to be considered an effective access control technological measure.

I highly doubt that. Keep in mind that age restrictions which make you hit a single button to circumvent them are much worse in keeping the wrong users out, and afaik legally they're perfectly fine.

"Effective access control" means they have to do something which may work to some degree and doesn't have to be a burden financially or technically.