THis "you're approved by one of the big 5" before you get to use the web is just fucking awful. Logins (or security tokens) should be kept to a minimum for things like banks, customized web apps, etc where they have an actual -need- to know who you are and you have actively agreed to it. Forcing cloudflare to verify every web site access would be awful via tokenization. Maybe on the upside it would result in more content available via a more distributed web.