I could be wrong but when looking at the changed code, it still uses a token, specifically on this line. It’s possibly using user routes instead of the actual paid API, but it’s hard to tell without knowing twitter’s API in depth. Also it’s not possible to get everything just by web scraping, especially after they locked everything behind logins. AFAIK the most you can do is impersonate search crawling and get singular tweets or profile bios.