I didn't want to have to put everything behind cloudflare, but this sort of nonsense made it the least bad path forward for us.