I mistyped: it's that Vary header that Cloudflare doesn't support (for non-image resources) - see https://developers.cloudflare.com/cache/concepts/cache-contr...