It's a failing on the part of Cloudflare to have used rules so many times and not realize this important detail.

It's not expressed anywhere in the UI, so at some point someone really just said "well the user will figure it out."