Your browser's network fingerprint has likely already been validated as not-suspicious traffic. Your curl instance has a different fingerprint and reads as more suspicious. This is Cloudflare working as intended.

We have a similar set of checks on https://www.easel.sh.