Looks like if you enable “Forbid proxy comment posting” using the WP Security plugin in conjunction with Cloudflare then comment posting on WordPress posts and pages will be blocked. If a user attempts to submit a comment then WordPress will dump them on a blank page.
Just figured this out after, I dunno, running this setting for about a year.
Hey look, commenting works now. 🙂