I miss framed this: the concern here for me is not a malicious attack but that you're still affected in terms of routing: your service becoming unavailable because your hoster or their ISP relied on cloudflare.