Huge, huge numbers of machines behind a single external IP mean that your internet access carries all their reputation by proxy. Since switching off Comcast to a smaller fiber company that uses CGNAT I've seen somewhat more Cloudflare challenges.