Its manual 403 i am pretty sure, so manual blocks that will not work using any service, even getting whitelisted by Cloudflare bot fight mode wont help unless the rule has allow known bots only option.
Cloudflare never blocks traffic except for waf triggers, just challenges it.