Agreed, I don't really like Cloudflare trying to magically fix every web exploit there is in frameworks my site has never used.