> How do you even implement an ua check?

For this purpose, it looks like this:

  if 'googlebot' in request.headers.get('user-agent', 'googlebot'):
      return 403