I personally don't use CloudFlare but do manage a website which uses one for a job, and there's a button to mangle e-mail addresses, so I don't think this is th

I personally don't use CloudFlare but do manage a website which uses one for a job, and there's a button to mangle e-mail addresses, so I don't think this is their concern. DDoS attacks are surprisingly negligible, comparable for ordinary IPs, so I don't think that's what they're protecting at.