Oh, you definitely got why I'm against Cloudflare..

Cloudflare has bot-mitigation built in, sure. So why would someone Anubis between their app and Cloudflare as it fulfills it's reverese proxy role, idk. It seemed like that person was trying to explain to me where Anubis was supposed to fit in sequence here. It's meant for the reverse proxy scenarios specificed in the example (nginx, Caddy, and others)

You are also correct. The "free" DDoS mitigation is an irrelevant argument against the privacy implications of using Cloudflare. Cloudflare isn't the only DDoS mitigation option.

*BuT iT's FrEe! *

Is it, really?