Cloudflare isn't "stepping in". Anyone can sign up for Cloudflare. So you're asking Cloudflare to explicitly step in and strip protection from a particular webs

Cloudflare isn't "stepping in". Anyone can sign up for Cloudflare. So you're asking Cloudflare to explicitly step in and strip protection from a particular website against their policies of basically non-interference, presumably to enable a DDoS attack to succeed.