Apparently this is the case: https://github.com/tulir/whatsmeow/discussions/199

I've been running and using a puppeting bridge [1] for my Matrix instance for more than 4 years with 3 different numbers and no problem at all.

The controls they have in place are probably based on behavior, rather than on access.

[1]: https://github.com/mautrix/whatsapp

WhatsApp will ban you if it detect any kind of automation, if you use this or an other wrapper you will -very luckily- get banned, even without making calls. They want you to use their paid business API

Good to know WhatsApp is at least somewhat proactive against scammers.

It saves the messages in a local SQLite database on load — so querying shouldn't be an issue as it doesn't contact the WhatsApp server. For sending, this does use the API however and needs more caution