It depends how their user's configure the settings. You can use Cloudflare and effectively turn all blocking off very easily. There is a reason their customers tend to leave it on, or in my case, increase the default security level. Sorry Tor users, but 100% of the Tor traffic I've gotten has been malicious WP vulnerability scanning

Okay, I understand, but I am so sick of identifying stoplights, trucks, and airplanes. It would be nice to have someone say, "Oh, you'd like to read my interesting information anonymously? Go right ahead!"

For webmasters, the damage these rogue bots, tor, hack attempts can just bring down the whole business. I think more and more smaller websites will be opting for cloudflare in coming days.

Webmasters? What is this, 2010?

But on a serious note - you can't exactly rely on Cloudflare to not bring down a business. For me, it is a very nice convenience to throw up in front of my WP sites for caching and to help limit the bad traffic I get, but that's about it