Most of these protections are easy to work around, and people do just that, but that isn't the product cloudflare is selling.

To the target market, who have a spam issue, cloudflares protection sounds great, and by the time they've set it up, they won't switch CDN's just because it isn't effective enough.