Cloudflare and any other anti-bot service is only good against people without willpower and knowledge to bypass them.
JS can be reversed, you clearly see what data points they use for detection. Anything can be spoofed and it will look like human behavior.
And if everything fails, you outsource it to AI - Always Indian :D