Lots of valid concern about us all using CF, but is their an alternative to their WAF that isn't enterprise expensive?

Yep, bunny.net is great, we also use it. And look at https://altcha.org as a Turnstile replacement

Depends on your needs, but for example there's Bunny Shield: https://bunny.net/shield/

Thanks for the pointer. They'd still wind up being a couple thousand dollars more annually than what we pay CF now.

Frustrating, because I know I'll get asked today if we have an alternative to using CF, and I don't have a good answer.

what's a good alternative for their WAF, that isn't enterprise expensive?