But they weren’t building an application. They were building a library that would get integrated in other stateful server applications not running on Cloudflare

But they weren’t building an application. They were building a library that would get integrated in other stateful server applications not running on Cloudflare. The performance benefit comes from running their auth colocated with their customers, not anything else.