So I got an Incident ID and some captcha mumbo jumbo for attempting to browse that site. Apparently they don't like visitors. Feeling generous today, I decided to not inconvenience them further.
I always had the feeling that the Cloudflare CAPTCHAs discriminate in various ways, for instance I would see them much more when I was browsing on a Samsung Galaxy tablet than when I was browsing on an iPad. They disproportionately affect the disabled and I wouldn't be surprised other vulnerable populations.
If I had anything to do with it having a CAPTCHA or a GDPR popup would be an immediate WCAG fail at A level.