I don't get that. The traffic is BLOCKED at first PoP by WAF / Firewall. Therefore NONE is hitting the backend usign Argo. *According to Cloudflare docs / website

Why you are getting billed for something you are not using (attack is mitigated by Firewall which is paid separately - page rules) ?

Can you please elaborate more. We been thinking to enable Argo too, but this is just strange experience you are describing.

Thank you