Still, the cache status was “dynamic”, so every request went to the origin.
I already had the cache-control header set for static assets (images, stylesheets, scripts), just not for HTML, because in two years of repeatedly hitting the front page of various sites, it was never a performance concern.
Creating a page rule didn’t immediately fix