Only thing about cloudflare tunnels that has led me away from it, is the unencrypted mitm part. I know they need to do it for their thread algorithms.