Might be a problem with Cloudflare marketing. I use it for my sites and well, but I don't think of it as a magic button / service that makes all my problems go

Might be a problem with Cloudflare marketing. I use it for my sites and well, but I don't think of it as a magic button / service that makes all my problems go away. Cloudflare is a hosted reverse proxy service that handles DDOS protection. It enforcing rules on RSS pages is no different from me putting in a captcha extension on nginx or Apache and having it run on all pages by mistake. And this isn't even a default configuration issue. This is simply a mis-configured service, no different from misconfigured haproxy / nginx / Apache / Cloudfront.