The CDN's are the MitM.

why wouldn't that be the purpose of cloudflare? the system is designed to do what it eventually does. Not what we are told, hope, or dream.

cloudflare in its service, provides a clean, efficient way, to centralize, a decentralized independent internet. Giving whoever holds the keys to cloudflare control over those resources, for whatever purpose. Ban's ? Instant. Shadow ban, easy. Hoax (redirecting traffic) simple. The idea that 'but they're not supposed to' is childish.

Never give people power over you. Ever.

Let’s be clear that not just any state actor can do this. We’re talking about the US, UK, rest of the eyes alliance. Snowden revealed they are the threat who operates like this and we shouldn’t forget it.

India can’t likely do this, China, Russia, Brazil, South Africa cannot do it.

Yes this is absolutely a risk..

You are entirely correct. What Cloudflare does is also valuable and tricky to replicate though, so people reeeally want to deny it

Cloudflare also forces you to enable javascript, so allowing them to fingerprint and de-anonymize you

Been saying this for years. Check my comment history.

Tailored Access Operations (TAO) would be the NSA team in charge of it.

Or certificate providers are ordered to provide a false certificate; or in case of Europe (thanks to the GDPR), the "data protection officer" that larger services operating in the Union (including cloud- and hosting-services: hosting most of the modern internet), are forced to employ and provide with unrestricted access (supposedly "to monitor compliance"), may be ordered to do additional processing (including that for which their "employer" has no legal basis), whilst being gagged by "professional secrecy" (including towards this "employer"); and the NSA also has a program that seeks to weaken TLS standards (at least by pushing standards for post-quantum encryption (PQE) only, instead of AES + PQE).