Do I still need click fraud protection if Google already refunds invalid clicks?

Google does issue automatic credits for clicks it judges invalid, and those arrive whether or not you run anything else. The catch is that Google does not disclose the criteria it uses, so you cannot tell what was caught and what was not. A protection tool works on the clicks you can see and identify yourself, and it prevents repeat sources rather than refunding them afterwards.