The Cloudflare bit, at least their consumer product in question only works as a public VPN (such as Mullvad, IVPN, etc…), meaning it’s more of an encrypted proxy. So it doesn’t counter anything.
Why it blocks incoming connections on other interfaces ¯⁠\⁠_⁠(⁠ツ⁠)⁠_⁠/⁠¯
It only makes sense for it to capture all outgoing connections not destined to split-tunneled IP ranges, as to prevent leaks.

No. But I’ve never had it uninstall an app. Let alone one I had for months from F-Droid.

Some can be pretty limited in what they allow you.
For example, I tried Moto G54 5G, and it kept giving me full-screen update notifications, which would immediately re-appear when I exit it and closed it from recent apps.
Naturally, I tried to disable Moto updates, at least temporarily.
Hmm, shouldn’t that be me?
I returned the phone for a refund.

*#*#info#*#*

OH, that’s why 4636.

So 3646633 could be ENGMODE (Engineer Mode on MediaTek). Are all of them like this?