Cloudflare's "bot management" is effectively their own solution but doesn't provide a way to affirm you're not a bot like other solutions do; think of it like a fraud detection service and not a captcha service.

I also find it unlikely that they move away from Google's recaptcha since they seem to have an unlimited, unrestricted (can be used for any domain) recaptcha API key that they heavily rely on for the "captcha" challenge website owners like to use.