Some loyalty bots use that endpoint and just accept that it’ll be inaccurate and easy to game the system by people who may not even have the stream open, and also aware that at some point in the future that endpoint will likely be removed and make their points system no longer viable.
Other loyalty points systems use extensions, which can be somewhat easier to maintain compliance with GDPR and other privacy laws as those sort of loyalty points systems are opt-in as the user has to choose to share their ID. Extensions have the downside though that not all platforms can use them.
The most accurate points system is Twitch’s own channel points system. 3rd party integration is very limited at the moment, but there are more endpoints planned for it in the future.