If you want to use an agent for scraping/automation, you would need to supply it with auth credentials. So permission is required by default.

I think they're talking about agents that click through insurance and bank forms, not bots that post on social media.