This can be mitigated by https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Re...
This seems to work for links, but does it work for when you embed a script?
> [...] by using the referrerpolicy attribute on <a>, <area>, <img>, <iframe>, or <link> elements
Hm, seems not to work for scripts.
I'm browsing to med.com/somedisease and now CF links my browser to the URL from Referer header.