Not sure - Akamai seem to roll out defenses against most new attacks, and Akamai isn't a new company so presumably they've been doing it for a while? Never dug too deeply into the WAF settings so maybe it's possible to turn them on or off.

Cloudflare likes to block anything that looks like code even if an application is not vulnerable, so I'd imagine it would stop some beginner attacks. (most likely not nearly all possible attacks though)