[thayne]

So does this mean any site with a security.txt file is violating cloudflares ToS?

[bawolff]

How about robots.txt, since security.txt is looked at by humans, but robots.txt is almost exclusively looked at by non web browser clients.