>I suspect that sites don't know when CloudFlare is false-positive blocking legitimate visitors and costing them customers

So let them know. Put a value on it too. Then maybe they’ll be more careful in dismissing “false positives” as a business cost (especially for someone like GitLab competing for business).