I wonder why CF doesn't disable bot protection on RSS feeds by default. They're supposed to be readable by bots, that's the whole point!

I guess they don't really care that much to implement all the possible exceptions.

Exactly this. You want to turn off bot blocking on all endpoints that are intended to be used by bots.

Really you should probably turn it off for just about everything on your site unless you are worried about scraping.

I can’t find an option for turning bot protection off in the drop down.

Does turning off browser integration works?