Why creating a website just to ruin it with misconfigured default Cloudflare security settings not appropriate for majority of websites on the Internet?

Even Talkimg has no issues with Tor exit IPs thus I doubt your website will be any useful to people who value their privacy.