Since instead of Cloudflare Ezoic CDN is accessing the servers, it will be great if you can provide "Authenticated Origin Pulls" because this will prevent any unauthorized and direct access.

Reference: https://support.cloudflare.com/hc/en-us/articles/204899617