RedTrack cloaking usually sits inside the tracker, so bots still get counted. Here the filter runs before RedTrack via PHP or Worker and money goes to the tracking URL: RedTrack cloaking.
In Facebook Ads a real tap differs from an ad review check, and fbclid alone is not proof of a live user. The adcheck.destination rule is explained here: Facebook Ads fbclid.