This could be a method they use but I doubt it is main method of finding bots. It seems inefficient for finding bots because it could potentially mistake a real person for a bot which doesn't happen.
I think if I was Jagex, I would look for methods to detect the bot client, amount of log in time per day, and IP's.