And all this is done with a single entry in hosts after receiving the real address. After all, knowing the real address, the bot doesn't have to go through cloudflare. The only good argument is caching, and it can be implemented independently. I find it strange to give all the traffic, including authorization, to cloudflare decrypt for the sake of caching.