I was initially going to be dismissive because everything is against everybody’s ToS (ie last I checked it was against my ISP’s ToS to operate any sort of server)… but looks like cloudflare actually actively enforces this one, so yes my comment is a bad idea!
There was just another one recently actually. It was the final straw that convinced me to stop making my Jellyfin server publicly accessible (for my family abroad) and move to a VPN based solution instead (WireGuard or Tailscale I haven’t set it up yet).