@deirdresm
> [In my experience], [CloudFlare] usually leaves bigger fingerprints than (HTTP Headers), but I haven't been paying close attention(…)

We recommend people who are able, pay attention to the MITM attack.

We're unsure whether the firewall setup above works on linux phones, perhaps the #BlockCloudFlareMITMAttck (or #BCMA) addon can help that use case:

https://notabug.org/dCF/deCloudflare/src/master/subfiles/addon/bcma.md

Onion: http://wmj5kiic7b6kjplpbvwadnht2nh2qnkbnqtcv3dyvpqtz7ssbssftxid.onion/dCF/deCloudflare/-/blob/master/subfiles/addon/bcma.md