That’s the joke, yeah.

Maybe I’m misunderstanding what “behind cloudflare” means in this context, but I have a couple of my sites proxied through cloudflare, and they definitely don’t have my keys.

I wouldn’t think using a cloudflare captcha would require such a thing either.

Is there a reason other than avoiding infrastructure centralization not to put a web server behind cloudflare?