Auto pick has many uses for non botters. It would make more sense to take auto attack off, and even then, auto attacking is not botting. I think its best the way it is now, captcha to suspect behaviour, and reporting of botters that lead to their banning. Restricting too many actions is not wise, it's the same as punishing innocent people for the transgressors deeds.