Cloudflare's WAF breaks the web. The web should be open, anonymous, and automatable on behalf of users. Any web service that doesn't like this idea should not get my business. Period.
What we really need is a browser that absolutely cannot access sites "protected" by Cloudflare, and this browser needs to become standard. Sites that put themselves behind Cloudflare need to pay a price for their hostility, and that price is the loss of our business.
If I want to program a bot to get around the horrendous lossage of the terrible UI and multi-megabyte bloat you have created by farming out your web server programming to the lowest bidder, I have the right to do so. In turn my bot will respect robots.txt and will throttle itself appropriately.
This is the deal you signed up for when you built a web server. If you don't like it, GTF off the web. And take your attestation and WAF with you.
I tend to agree. I'm working on a web scraping project that allows an ordinary person to spot misbehaviour by well-resourced corporations. Cloudflare is absolutely getting in the way, and helping the bigger guys escape accountability by making them hard to track.