How is having a specific definition relevant to this conversation? An approximate definition of "a human using a browser to visit a site" probably suffices, without having to get into weird edge cases like "but what if they programmed lynx to visit your site at 3am when they're asleep?".

>Regular users that cloudflare (profiles) accuses of being bots. God help you if you want to block trackers or something else that's not regular.

I use ublock, resistfingerpnting, and a VPN. That probably puts me in the 95+ percentile in terms of suspiciousness. Yet the most hassle I get from cloudflare is the turnstile challenges can be solved by clicking a checkbox. Suggesting that this sort of a hurdle constitutes some sort of "criminal enterprise" is laughable.

I do occasionally get outright blocked, but I suspect that's due to the site operator blocking VPN/datacenter ASNs rather than something on cloudflare's part.

>This is part of the problem. But hey, at least they are only a process change away from charging normies too.

So they're damned if they do, damned if they do? God forbid that site operators have agency over what visitors they allow on their sites!