Question regarding access policy but not tunnel?

I have plex on a Cloudflare domain. I want to secure the domain with something extra like an MFA. I saw that access can be applied to this in front. this is not a tunnel this is a domain and a reverse proxy etc.
As this access policy be it email certificate or warp etc. This does not break cloudflares policy of no streaming within a tunnel, correct? as this is not a tunnel it shouldnt have an issue its jsut applyign access in front of my website?
Can someone confirm?