You can disable CloudFlare's tor-blocking [1] - I do on my static blog, as I don't see much value in putting a captcha in front of static content.
[1] https://support.cloudflare.com/hc/en-us/articles/203306930-D...
It'd give me an interesting conflict if I ever had, as I take Cloudflare captchas as a huge negative indicator of trust.
Now the UK is stepping up surveillance silliness I use the VPN rather more, and expect many others are, or will. Which today just means endless unintelligently implemented CAPTCHAs.
They're working on it! There will be a talk about this about Real World Crypto 2017 in January, see "Solving the Cloudflare CAPTCHA" on the RWC program: http://www.realworldcrypto.com/rwc2017/program.
Shame RWC don't put out videos of past talks - there's a couple of others look pretty interesting too.
(Funnily enough, Google stopped giving us captchas at the same time ;))