Most of the value of a business plan comes from the viewpoint of a business that handles transactions or needs well-defined support response goals - you get PCI DSS compliance (attestation) and a proper, severity-based support SLA.
It’s an add-on product - plan is pretty much irrelevant. Enterprise is only categorised differently since there is no ‘add-on’ for Enterprise, everything is tailor made in your contract.
Is this still relating to Cloudflare for SaaS? All of your zones will get your fallback’s WAF - but I guess you could be referring to hostname specific which is Enterprise only. https://blog.cloudflare.com/waf-for-saas/
Is this referring to Advanced Certificate Manager?
More configuration over (Super) Bot Fight Mode is definitely something that could be improved on.