Regardless of whether or not you provide your own SSL certificates, cloudflare still uses their own between their servers and client browsers. So any SSL encrypted traffic is unencrypted at their end before being re-encrypted with your certificate. How can such an entity be trusted?
All these “omg!!! cloudflare is a mitm!!” Posts are idiotic. That is LITERALLY THE SERVICE THEY ARE PROVIDING. that is almost the ENTIRE POINT of using them. I feel like these posts are made by people who just discovered what MITM is and somehow think they’ve just discovered fire. How do people think tunneling and reverse proxies work?