Cloudflare's new default asks what a bot is for, not who it is
On 15 September 2026 Cloudflare's new defaults took effect: for newly onboarding domains, bots classified as Training or Agent are blocked on ad-displaying pages while Search stays allowed. Purpose is not a property a request can carry, so the access decision now rests on a label held about the operator in someone else's registry.