Oops, just accidentally the whole Internet

Cloudflare is shit. They're a diabolic extractive, toxic and anti-user megacorpo, they sell our metadata and telemetry, they censor us and can arbitrarily impose arbitrary terms or actions on users, terminates TLS when the data gets to their server, thus the data is decrypted when traveling from Cloudflare's server to the requested host or direction, and when acting as a CDN or security layer, they're actually a MITM intercepting and deciphering all the HTTPS traffic, then arbitrarily inspecting it in opaque ways.

I don't even know why or how so many people choose to believe them, even lots of "privacy concerned" users and "privacy-friendly" tools like if Cloudflare were any privacy-friendly at all.

If you're supposedly privacy concerned and/or privacy-friendly, but keep using Cloudflare software and services, then you don't care about privacy at all.

Looking through the list it sounds like folks are simultaneously upset that they have a non-interventionist policy and also that they do intervene in extreme cases.

Not an enviable position. I guess the answer is to strictly define and follow a policy setting when a situation escalates to the point they will intervene.