In the US landlords do have some liability for criminal conduct on their property whether committed by tenants or others.
Most web services do have strict restrictions on conduct. This is a far cry from vigilantism.
It’s messed up for Cloudfare to wash their hands of any responsibility here.