Putting it behind a 3rd party API that has registration ensures that the 3rd party that is under contract to report it does so. It isn’t enough just to block it - it needs to be reported too. Google and Cloudflare report it to the proper authorities.
Additionally, if it was open source, people trying to evade it could just download the open source tool and tweak their images until they come back without getting flagged.