Some of my own thoughts about this. I don't know, I don't work at CloudFlare. Anyway: > infrastructure, which operates out of questionable ISP and IXP colocati

Some of my own thoughts about this. I don't know, I don't work at CloudFlare. Anyway: > infrastructure, which operates out of questionable ISP and IXP colocation facilities in various jurisdictions with dubious standards What are these questionable facilities? When CloudFlare has installed those servers and software, and they have also made software that manages those servers, what is the problem? CloudFlare has written some articles about some of those very many security protections they have. But that is a very lot of technical detail to explain, so if that is so important, their Enterprise/FedRAMP offerings fund CloudFlare to make possible to explain that amount of detail. But question is, do you really need that amount of detail? How much you have expertise to build same amount of security protections? Isn't it better to use CloudFlare Workers security features to concentrate on building your app? Alternative is to get your own bare metal servers, and manage them yourself. With CloudFlare Workers, they have security features to keep code and data of each customer separate from each other.