For any of my pages that do happen to use Cloudflare, I am luckily able to disable this discrimination in the CP so kudos for that at least, but terrible defaults imo.
tor has some absolutely valid and import use cases, but what percent of tor exit traffic is actually someone trying to keep their traffic anonymous from the eyes of an oppressive regime, and what percent are script kiddies, or someone hiding torrenting from their isp?
Those are the two I find repeatedly blocked when accessing via Tor. The former by Cloudflare, the latter by Google.
I use Tor to lookup phone numbers that have just called me, to decide whether it's a good idea to answer. Since I don't want to be personally associated with such numbers I prefer to search anonymously. But often it's impossible to get a result.
Sometimes even spending 5 minutes solving captchas isn't enough. (I'd only spend that long to see if it's just an outlier. No, it's quite common.)
This creates an immense pressure to tell various services exactly who is phoning me, which is a terrible attitude to privacy.
It's not your choice if the site owners/admins use cloudflare. It IS your choice not to use those sites.
There is no "don't use" if I want to get my task done.
I can choose not to obtain the information, but then I still have the problem I started with.