Kind of, but they lie in the HTTP request - their user agent isn't true, they don't disclose they're a bot, they try to replicate other traffic as a disguise, they use many different IPs so they can't easily be blocked, etc.

It's kind of like me asking to borrow your car to go to work and then I take your car and ship it overseas.