“This basically means you must have JS enabled to access the site and you will incur a 2-3 seconds delay before the content is served.”
Chrome and Edge get straight in. Firefox gets a JavaScript challenge and a few seconds of waiting. Cloudflare says it is one customer’s rule, but bot detection by TLS fingerprint naturally favours whatever browsers are common. Small browsers get punished for being small, and the web drifts further into a Chrome monoculture.