As always, I am worried to see Cloudflare and Google Chrome -- two of the internet's biggest/worst monopolies -- working so closely together like this. Cloudflare is already undergoing enshittification, like banning all automation by default that hasn't undergone privacy-invasive certification procedures (they recently started calling disallowed bots "AI Training", but that doesn't change anything -- you still have to be on a whitelist in order to be allowed). I have no doubt that in the near future, they will release some kind of ID verification and then the vast majority of the internet is simply done.

▲

stubish 4 hours ago | parent [-]

A bot owners enshittification is a site admins salvation. The toggle is trivial to turn on or off. What will site admins do I wonder?

	▲	LoganDark 4 hours ago \| parent [-]
		That's not my point. Cloudflare is blocking all unregistered automation as "AI Training" by default. My guess is we will see almost no one changing that default, as opposed to the inverse where only some sites will be forced to enable the blocks. Opt-out is a very bad model for things like this because it heavily hurts users (especially assistive users) while most websites won't have a strong enough opinion to even consider it. I don't think we will see Cloudflare enabling an "age assurance" requirement by default. I feel like I could trust them slightly more than a site operator, depending on how it's performed, but I also feel like it would be very easy for them to do much, much worse than any site operator, due to the inherent power of being a GAA. (Global Active Adversary, to those not familiar)