I guess Cloudflare is just using "7 simple bot detection methods that won’t inconvenience users". You yourself said and practice the belief that it's okay to algorithmically block people if their browser isn't bleeding edge or something seems weird. It'll only ever effect a few people, right?
It doesn't feel so good when it happens to you, does it? Maybe consider removing your "your web browser is too old or misbehaved." blocks that actually do inconvenience people.