Can click fraud protection stop a competitor clicking my ads?

It depends on how they are doing it. A competitor clicking from a fixed office connection is straightforward to exclude, and once excluded your ad stops being shown to them. Someone using mobile data or a VPN can change addresses faster than any exclusion list can follow, and Google Ads caps exclusions at 500 per campaign, so you cannot outlast them by adding entries.