NoScript is incredibly invaluable. In fact, my philosophy has changed dramatically where I prefer to write my website with a No-JS first design.
The problem is that I think too many developers take for granted that nearly everyone enables JavaScript by default. It leads to sloppy development, e.g. why use the built-in HTML5 input validations when you could rewrite it using JavaScript.
I tend to think that Cloudflare might be overly relying on JS being enabled in order to work properly. In fact, a quick search engine search shows that Cloudflare is using this:
https://developers.cloudflare.com/turnstile and there's this quote: