WAF blocking things randomly isn't a good look for Cloudflare. I wonder how many outages this has caused for their customers.
And yep. Disabling WAF were always a good enough solution untill we figure out which of the request parts are triggering rules