Agreed, and I would say what cloudflare does for the internet (their work on the IETF, generally letting small sites stay alive without needing an SRE to worry about DDoS attacks, etc) outweighs the general negative possibility of them being a potential single point of failure