Requires your client to run a web browser though? That's a lot different from just an ssh client?
https://developers.cloudflare.com/cloudflare-one/connections...
That said, personally I don't really have any devices that can use SSH but not a browser.
Read the docs, you can do it either way.
No headless boxes?
Also I wouldn't use Cloudflare Tunnels so this is a moot point.