I'm honestly not sure how much of "client detection" or using native OSRS client plays into bans. I've heard people on varying forums saying that mirror mode, or shit like that is complete marketing BS, and I've heard people that swear by it. I am no developer, coder, nor know fuck all about java so I'm somewhere in the middle on that. I think it mainly comes down to what skills you bot, whether these are high profit, and mainly, the script quality, script user count, and overall botting style/behavior you have.
I've found runemate to have some top notch scripts, and my favorite thing about them is that they seem to have a lower to medium user count, compared to other competitors sites. And although I have my gripes with the hourly payment system, I think this is one of the, if not, best ways to ensure top quality of s c r i p t as well as frequency of updates. I've really liked the mouse movement of a lot of scripts on here as well- it's fluid, isn't extremely fast or unnatural. I also agree that the longevity of the account and the variety of said account, like quest points, legitly playing different skills, is important.
People will say luck, I'd assume that plays a certain factor, but there will be no "luck" in cutting yews on 8 accounts for 24/7, for a whole week. So there's absolutely ways to bot/play smarter and lower your ban rate... I'd bet anyone 100M right now that botting 4 hrs a day on NMZ would be much less risky than again, yews for days on end nearly 24/7.
I wonder if Jagex has, or wants to spend, enough money to actually have their automated system review ALL accounts currently online. I'm sure player reports will give you priority to have your account inspected, and I think a lot of "luck" may come into people being randomly selected to be monitored. Maybe sort of similar to an airport security screening where some people are randomly selected to be searched.... I also think the system will scrutinize or move people higher to the top if they are playing for extreme amounts of time, making massive amounts of gold, or getting insane xp gains over days or weeks time. This may not result in a guaranteed ban as maybe someone with a very good private script can potentially avoid that automated system doing anything to them, even with raising flags, as jagex assumes the behavior is human like, or doesn't detect any script patterns.
Also, I personally believe JMods will roam the worlds and look for bots or botting behavior. They did it in their bot busting ban- they can teleport seamlessly all over the world. Of course in the bot busting stream, they knew the accounts were bots, but I feel like all they have to do is hop into rock crabs, look at your screen, and can fuck you within minutes.
In the end, who knows, right? It's all speculation. If THERE IS any CONCRETE information on how Jagex bans, it would be extremely valuable, top secret info. I'd view it like asking Apple for their engineering schematics for their iPhone.... who the fuck would share it to the public? Would get patched quickly, and become useless. And since RSGP has real monetary value, we're looking at an undetectable bot, or even a bot that was less detectable still yielding bans, as highly valuable. Or the info/intelligence that could be out there could create an invulnerable bot like that.
So anyways, play legit, age the account, slowly increase the daily play time, max up to 4 hrs per day, do quests, SWITCH SKILLS, and training activities daily, talk to people, don't use shitty scripts, use breaks. This is what I do for my main. All though it's not like back in the day where I could run a Nexus bot and get teh fat 99's and bot cautiously by only playing "16 hours a day" (lmao), it gives me the opportunity to have a little bit more legit playing time and a better sense of accomplishment, as it takes more effort to bot the stats up, and gives me more time to see the skills slowly increase.
If you are trying to bot to make gold to sell or fund a main, Good luck, Have Fun. Prepare with lube because you'll need it- you'll want to start with at least 4-5 accounts with bonds and the necessary funds- you will get kicked down and banned time after time, so your goal is to continually profit even after bans, so you can buy more and more bonds until you have an army where you are profiting enough to keep gold, and have bonds as well.
P.S: ignore runemate turning the word s c r i p t into bot. I'm never changing my terminology, a s c r i p t is a s c r i p t, runemate is bot, and the woodcutter is the s c r i p t. xD