So what's the issue here (I know what the issue is in terms of the subresource not loading, a bit like an oauth redirect not executing properly if a user needs to log back in.)

Is it because of a misconfiguration on blender's end that should allow css to passthrough without verification, the query param messing a cloudflare passthrough default, or something else?