The conversation with almost every other network operator that I have goes something like this:
Me: "hey guys, the host at [operators ip address] is spamming/serving malware/phishing"
Them: "Hey thx, we'll check it out / notify customer"
If I check out a few days later, usually the criminals aren't on these people's network anymore.
With you it's like
Me: "hey guys, the host at [ip address] is spamming/serving malware/phishing"
CloudFlare: "We R a Reverse proxy"
And you don't do anything.
The problem with you is that you think you're some sort of savior of the internet, when all you are is a company providing a service, and you are free to terminate customers who are abusing the service you provide, without trying to pretend you are some sort of government like entity.
If you own a restaurant and one of your patrons keeps spitting in other people's food, you don't tell them that "Oh, but we have due process come back with a court order and maybe I'll ask him to stop." - you just kick them out.
It's your network - start taking responsibility for it.