The real problem with cloudflare is the fact that it is the single centralized TLS terminator. Not for a second will I believe that there is no eavesdropping -

The real problem with cloudflare is the fact that it is the single centralized TLS terminator. Not for a second will I believe that there is no eavesdropping - the temptation is just too high. IMO, the real threat to open internet is our current established certificate management system, but that's a totally different topic.