tl;dr Cloudflare offered a savings over AWS CloudFront, but we saved multiple orders of magnitude DIYing it on Hetzner. So far ops have not been too painful.