cfsucks

This isn't "make you put in more effort". The customer put in more effort when they reached out to Cloudflare (because Cloudflare didn't even bother to send them an automated email). This is "you have no recourse unless you happen to get popular on the Internet or know someone".

> a decision based solely on automated processing,

"this account was identified in a recent fraud review, however it appears to have been a false positive"

> which produces legal effects

Deprivation of property.

Which violates their registrar agreements:

> Registered Name Holders must be able to transfer their domain name registrations between Registrars

(Note that sections 3.7-3.9 do allow registrars to deny transfers, f.e. given "evidence of fraud", but given that they reinstated the domains I doubt they have evidence of fraud.)

https://www.icann.org/resources/pages/transfer-policy-2016-0...