Zero Trust firewall blocking being blocked by the “Security Category” > “All security risks” firewall policy

You may want to create a list of allowable domain under the “My Teams” menu and add that domain to the list. Then create a DNS policy for that list. You can follow the examples listed here: Common DNS policies · Cloudflare Zero Trust docs