Twitter describes how they get the 5% number (from Matt Levine [0]).

They randomly sample 100 accounts per day and have human raters decide if they're bots or not. This is the right way to validate that your fancy ML algorithms are working well.

[0] https://archive.ph/GtYzO