Most venezulean golf farms are actually humans, rather than the bots. But Jagex is slowly making progress on a problem thats really difficult. A huge percent of players use Runelite, a 3rd party launcher, because it provides invaluable tools (the game is near-unplayable without it). Jagex is working hard to improve their launcher to the level of Runelite, and then they'll be able to implement much better client side botting detection (since currently its all server side).

But agreed, their bot detection is horrible. I was botting 1+ action per second for 12+ hours a day for months and was only caught when I made a dumb mistake. Tough though, since there are real players with the same playing habits.