The owner sets the level. If they set strict level, all bots are blocked.
They do care. VC funding happens because the result is profitable. If it is less profitable, there will be less funding because of higher investment risk.
they can already block VPN traffic (unless you use their VPN)
their whole business model is based on them being a man in the middle that decrypts ssl and analyses the packets plainly
about a third of the worldwide websites are using cloudflare so they have a pretry good birds eye view on behaviour of any machine, datacenter or ip range that will be visiting a lot of websites, which in turn will trivially whether it is normal user behaviour or a crawler.
if you want help you should provide detailed information. Tell exactly what commands you entered, from start to finish, not skipping anything and provide the outputs that you’ve gotten, especially the errors.
The pterodactyl discord will probably be more helpful there.
crowdsec is arguably not completely open source, but I'm very satisfied with it.