Not sure what is more appalling. Silently injecting javascript tracking, or writing a marketing-speech response like this without any substance at all

While bad, this is far from the first problematic cloudflare behavior. They host a lot of sites with illegal content and refuse to action abuse reports. I support legal free speech, but any business who knowingly serves blatant pirate websites really shouldn't be trusted to behave ethically.