It all depends on how you set up your project and custom rules. I recommend taking a look at persistent actions and reading through this guide: How to block bots from OpenAI GPTBot
I really recommend joining that live session with the Vercel security product team as well. They’re the experts so they have all the background knowledge to answer in a lot more detail than I can 