That's not their fault. Tor IPs habe shitty reputation because of the users on it.
And apparently cloudflare is much more aggressive on this front than anybody else in this business, including google - when I get a captcha it's always cloudflare (or hacker news). On those sites I can practically rely on getting one.
To turn it around, every time I see a cloudflare captcha they obviously have failed.
They how can you tell when they succeeded?
Your perspective is one-sided because you are always a good guy.