Cloudflare isn’t just as simple as “bot” or “not a bot”. They give customers categories of how likely a request is to be automated (or a number for some enterprise plans)[1] and the customer decides what happens to your request (nothing, challenge, block, run a worker, etc).

[1]: https://developers.cloudflare.com/bots/concepts/bot-score/#b...