Thing is, “Cloudflare identified this as a normal browser used by a human” doesn’t mean it actually is a normal browser with a human in the driver’s seat. There are going to be both false positives and false negatives (a browser puppeted by Selenium is still a human-usable browser, after all, and could even be taken over by a human in mid-session; by contrast, a browser whose settings have been chosen by a privacy advocate may make some expected indicators unavailable). So it’s hard to make any useful inferences.