It’s generally better to have your own Cloudflare access on your own domain/subdomain via cloudflare DNS, so BlueHost does not control that. False positives are quite common nowdays due to the massive amount of various threats.
Cloudflare firewall is awesome though, you can even turn it off temporarily for development or for your IP – if you have access of course.