Many people have outsourced the decision on who can access their websites to CloudFlare ("bot protection"), which incidentally makes these websites harder to access by bots working for humans.

Now there is an official paid search API, and I'm guessing the certified providers will be allowed through the Cloudflare "bot protection"?

This is very worrying.