Interesting that for https://chatgpt.com/ in the browser I get a 404, but if I curl the same URL I get a cloudflare challenge.

Your browser's network fingerprint has likely already been validated as not-suspicious traffic. Your curl instance has a different fingerprint and reads as more suspicious. This is Cloudflare working as intended.

We have a similar set of checks on https://www.easel.sh.