We’re tightening up controls and not letting any non-whitelisted/approved VPNs access any of our internal tools. This has been a feature of Cloudflare Access. We just hadn’t enabled it ourselves.