I don’t see how CloudFlare is going to realistically block someone who is trying hard enough.

They’ll just get the agent to operate a browser with vision and it’s over. CAPTCHAs were already obsolete like 2-3 years ago.

they don't have to make it impossible, just expensive enough for it to not be worth it. using vision is a perfect example.