I have never seen credible evidence that this is what Cloudflare sees as their business. They fundamentally don't care what browser the user is using. What they care about are the traffic patterns of users and preventing their customers from getting hit by bots, spam, and other malicious traffic. The fact that some browsers that look like malicious traffic is not something they can control or reasonably be held responsible for.

surely they can be held responsible - they are the ones defining whatever heuristics cause traffic to be classed as malicious!