It's also due to Cloudflare intentionally not policing its customers even a little bit, but i still side with CF - they're the less bad guys.