It didn't fail for him in firefox, even with privacy settings enabled.

It tripped "Canvas Randomization Detected". See the last screenshot.

Cloudflare's demo page still treats that as a pass, but complains about it. As is often the case with Cloudflare, I expect that they'll then take no responsibility for sites that use more aggressive settings.