Fundamental flaw in how services like Cloudflare are architected is that they propagate route leaks from obscure places all over the world.
There are efforts to move to a more secure version of BGP, but that'll be done around the same time the transition to IPv6 is complete.