Cloudflare Fraud Detection

This feels like more of a bandaid for security issues in untouchable production codebases than a new product consideration.

If I wanted to do something like the proposed use case, I would just do it on the application server directly. CF doesn't have any magic beyond scale of operations (i.e. DDOS scare language). You can use exactly the same techniques they are using and will probably find it far less complex to achieve the same effective outcome.

The action based tracking is kind of cool. Seems like something that could be easily productized. Are there any open source solutions to this?