Personally not sure what the concern is unless you only use Cloudflare for DNS only.

They see everything that passes through their proxy, and if they wanted to perform analysis on a site they're interested in I really wouldn't be surprised if there's a clause in the ToS that allows them to do it.