I have a pihole hosting DNS with unbound and a somewhat customized switch-stack with some layer 3 routing going on, but if Cloudflare thinks that makes me suspicious (probably because of the DNS filter more than anything else), that's really a problem with Cloudflare.
Their detection mechanism...