When they take down a Gym, they quickly fill it up with the accounts of their friends, families, and teammates - sometimes even if those people have long since stopped playing.
Multi-accounting: Some people who don't bot or spoof still cheat by using multiple accounts.That includes shadow-bans, which are preventing bot accounts (including those used for maps) from seeing anything other than common Pokémon, and slashing out illegitimately obtained Pokémon, so they're useless in battle anyway. Again, Niantic is always trying to make this harder and less useful than it was in the past. It's financed by online maps with ads and donation buttons, and by people who buy accounts online. With an army of fake characters and a bunch of scripts, botters travel the PokéScape, collecting as many high level Pokémon as possible. Botting: Botting is like spoofing but automated.In addition to potentially banning your account, Niantic also slashes out illegitimately obtained Pokémon, so they're useless in battle anyway. Niantic has a long history of banning players caught spoofing, in Pokémon Go and in Ingress before it. This can get you access to Raids and Gym, as well as lie to the game about how much you're walking. For a game based on your real world location, spoofing tells Pokémon Go that you're somewhere you're really not.