Ok, that makes more sense. So you're basically worried about the unencrypted connection between Clouflare and DNS authority server. Initially I understood that

Ok, that makes more sense. So you're basically worried about the unencrypted connection between Clouflare and DNS authority server. Initially I understood that you're worried about leaking IPs to DNS authority server itself.