It seems to be Cloudflare that is causing this.
You can see the redirect to cloudflare.hcaptcha.com and when you come back to usercp.php it's a POST instead of a GET.
It wouldn't be so annoying if it was rare but this happens anytime I've not interacted with the site for more than 5-10 minutes.