Cloudflare-Pale Moon dialogue stalled by overly broad NDA & secrecy of broken JS

Despite a long working relationship between Pale Moon and Cloudflare in the past, the latter refuses to disclose to the browser developers the 2 particular JavaScript functions and some CSP assumptions required by CF's browser check.

The only reasonable long–term strategy is for users to simply stop using any site which presents them with a captcha or other verification measure of any kind. Of course, 99% of users only care about how easy it is to get their fix and have never considered any of the long–term consequences, so it’s not reasonable for a browser to rely on their users adopting that behavior.