No server is obligated to vend my client data.

More importantly: no server is obligated to vend data until it falls over and dies, depriving all users access to that data if it isn't mirrored.

I think Cloudflare has honestly done an admirable job of coming up with a novel solution to the problem of loadbalancing and traffic-shedding in a world with a small-but-persistent percentage of hostile actors.

What's the alternative? Abusive traffic is the norm rather then an exception. This gets into the same argument when people say they don't need a CDN; it's a relic from when bad actors were rare.

If all I'm doing is requesting an HTML page, why do they have to send me a CAPTCHA? I understand that my request is coming from an IP belonging to a VPN and maybe someone used the same IP nefariously, but I doubt they requested the same page I have.

You can knock over a server with malicious requests of static content. In fact, what you are describing (requesting different pages) is the first step to trying to defeat a firewall rule that would protect against that attack.

This is the era after the invention of Low Orbit Ion Cannon. Attacks that would previously have been technically sophisticated can now be done with a few GitHub downloads and either many volunteers or many compromised machines.

Speaking of which, is it possible Cloudflare is paid by Google to display re-captchas? Someone needs to train those deep neurons.

We don't use ReCAPTCHA: https://blog.cloudflare.com/moving-from-recaptcha-to-hcaptch...

Doesn’t Cloudflare use Hcaptcha now? They dropped Google because of the cost.

One might argue that it's the abusive actors Cloudflare blocks who are breaking the web.