just remember sometimes cloudflare add new features which aren't controlled by existing rules

"security off for this ip?" "I guess you don't mean our new shiny feature!"