That is very curious, because I have both JS and all manners of clientside storage disabled, yet can access the site fine.

I guess maybe my CGNAT IP is reasonably well trusted and that's the difference?