Here one of the links I gave you reported this
and that’s because CF serves various forms of TLS
and some are no longer safe and do not meet certain criteria (e.g. TLS.1.0)
You want everything green ? A++
you can configure most of these security things on Cloudflare
so…
next
next (security headers)
you configure this according to your wishes
I just gave an example of where it is in CF
pay attention to X-xss
because you may find online suggestions on how to be 1, block and similar but
according to new research, it is better to put 0 (off) than to have it active.