I am curious to see how this works in practice. When I went to their Turnstile sign-up page [0], that is itself protected, I had no problems passing the test despite a slew of privacy-focused features enabled in my browser.
[0] https://dash.cloudflare.com/sign-up?to=/:account/turnstile