Yeah there's basically no way I would ever read what you just wrote and choose to do anything but block harder even at higher cost.

Bots end running around CF would guarantee turning on authenticated origin pull.