I'm not trying to encourage ddos, I'm saying only that Cloudflare doesn't need to protect them from ddos. You might argue that those things are a distinction without a difference, but I would disagree.

Imo, kiwi farms will be the target of ddos no matter what, that's table stakes. So to me, the only thing I see is "is Cloudflare stepping in to help kiwi farms (at their own expense) or not".