I setup my sites with Cloudflare’s free service many years ago and I just noticed that I still have page rules redirecting to HTTPS. For instance one of the sites has:
Some browsers, like Brave, now quietly test https in the background and automatically “upgrade” your connection from http to https. That may make your redirection seem redundant but it’s not.