Cloudflare is doing what it's probably configured to so by Internet Brands - it seems that they have probably cracked the config up to max due to a recent botnet attack and that max config is still in place. IBJoel did make a brief comment a week or so back but is probably prevented from saying much more without possibly compromising operational details.

I've personally not seen a Cloudflare intercept for several weeks now (UK domestic broadband IP or VPN back to my home if out and about, using Chrome or Edge) but I am seeing periodic database errors which might infer some ongoing malicious activity in the forum as recent as yesterday.