The other obvious solution is a "web of trust" where Cloudflare just tells you "this request goes in, this one goes out". I think the paying approach is superi

The other obvious solution is a "web of trust" where Cloudflare just tells you "this request goes in, this one goes out". I think the paying approach is superior (after all you make money out of people using your service) but Cloudflare is a straight forward/simpler one.