Well by design it's putting Google in a MITM position for your site (as is Cloudflare for the matter). You're either OK with that or you're not. I don't see ho

Well by design it's putting Google in a MITM position for your site (as is Cloudflare for the matter). You're either OK with that or you're not. I don't see how they'd be able to effectively stop Layer 7 attacks without being able to see unencrypted requests.