I get your point completely, but I think you do not get mine. It is not feasible to have WP-PostViews check EVERY visit against a 3rd party service (because it will just slow everything down) whether should the hit be counted as a legit hit. Google Analytics, WordPress.com Stats and most of the stats service use their own server to host all these information display it for you to see on their webpage and not embed it in your site.
Visit (Your Server) -> Check Visit Legit (3rd Party Service) -> If valid (3rd Party Service) -> Record the visit (Your Server) -> Increment the counter (Your Server)
Visit (Your Server) -> Record/check/process the visit (3rd Party Service) -> Display it (3rd Party Service)
How the information flows.
The reason why we can block bots count because they are predictable, all their user agents have been hardcoded in the plugin, so it does not need to check with another 3rd party service.
Sorry if I don't meet your expectations, after doing this for almost 5 years, I have learn that it is impossible to please everyone.
On a side note, you can block spam bots if you know their IP from visiting your site via htaccess.