We have a technical mechanism now to be able to disambiguate the reputations of customers behind a single network - ASNs.

Why doesn't cloudflare require its more difficult customers to have an ASN - then their reputation and cloudflares can be more easily separated. This wouldn't have to rely on flimsy static IP lists either.