Stembolt The reason most sites use CloudFlare is to protect themselves from Denial of Service attacks and other security vulnerabilities. Malware bot-nets make it relatively easy for hackers to launch large scale attacks at websites.
I thought captchas were supposed to stop bots and automated attacks. That infernal turnstile errors out half the time, and you have to do the aforementioned kabuki dance. If I can get in by manipulating incognito mode and my user agent, how hard is it for a bot to get in doing the same? No rhyme, no reason.
And, FWIW, one you’ve logged in and proven you’re human from your IP address, that IP address should be whitelisted for some period of time and allowed to bypass the gonk.
There are some sites I’ve just blacklisted on my end for their overly aggressive paranoid practices.