Hacker News Reader

Let's be clear here: they provided a waf rule. You need to actually have it enabled to be protected.

On the free Cloudflare tier its enabled and you cannot disable it. On Paid you can disable it.

They enable this kind of rules by default and for free.