Botting would not be so much as writing a script out for a bot, but creating bot accounts. VPN + free email is all that is needed for that. Gmail caps you on the amount of accounts you can have per phone number, so other free services would be used and there is nothing more than just using a browser like DuckDuckGo to mask anything being sent (chrome/any other browsers private browsing does not do this) and the referrals can be infinite. That or creating a VM and doing the same thing as it would create a new profile (MAC, IP, etc) for it.
IP tracking is not really a thing because you can easily change it in CMD
DuckDuckGo blocks cookies from being tracked
GDPR keeps a lot of sites from being able to retain the data without your approval, so minimal is taken on most cases.
It all comes down to what Soundcore added themselves. The site is ran off of Discourse, so it is open source and the API. If you inspect the page element, there are plenty of things in there that they can use for tracking purposes, but going through each account for discrepancies is probably not high up on the list right now when they are getting the site going/dealing with the current issues with coupons/everything else, as well as the huge influx of users from the Linus Tech Tips giveaway.