
- all modern browsers know when an event is coming from a real user or when it is made by JS - and that's not fake-able.
That's a core security concept inside the browsers.
When a real user input is required, then a real user input is required - that's it.
When it would be possible to fake that, then that would have been already done of course

.
Best regards,
Klaus