How can they interdict scripts that interact with the blockchain directly? I can see how they can detect bots being used to attack, because those bots are going to repeatedly do things a certain way.
Given the nature of incentives to do other things, and the low complexity of those actions - like investing in the heist - I can't see any way to detect that.
Why should there not be mechanisms to time investments, upgrades, unit purchases, etc? I expect the game to provide those mechanisms sooner or later anyway, as they're pretty much just rational ways to proceed.