Cloudflare took down our website after trying to force us to pay $120000 within 24h
(robindev.substack.com)
But, the guy admits that what they were doing with the domains was expressly permitted in the "Enterprise" class service. If it was expressly prohibited in the "Business" class service, then they set themselves up for the shakedown.