Just consider all the private crawlers whose caches weren't purged. Anything short of invalidating any and all tokens, cookies and sessions is irresponsible an

Just consider all the private crawlers whose caches weren't purged. Anything short of invalidating any and all tokens, cookies and sessions is irresponsible and CloudFlare should communicate is as such.