The point is that Cloudflare thinks due process, not DDoS, is the right way to bring down horrible websites. Thus they protect them until such due process happens.