I've been saying this for a long time: "Stop deploying web application firewalls" - https://www.macchaffee.com/blog/2023/wafs/

Modern cybersecurity is, at best, about compliance, not security. At worse, it's all theater.