Hi saikub,
The ?i=1 must show when initial visit to your site regardless of your rewrite rule settings, this is because the security system works 1 layer above the existing apache server, and the .htaccess file settings can only affect things that happens after the initial connection.
That being said you can always setup javascript redirect to the same page once more if the URL has that ?i=1 part, but this consumes 1 more hit to your account limit and potentially a redirect loop if things does get changed. Therefore this is not a recommended way to get it cleared but it should work.
A better solution is to register a custom domain and port it through Cloudflare, this way your website is exempt from the security system.
Cheers!