Cloudflare bans websites for unproven claims but is perfectly happy to provide protection for ddos-for-hire websites that so happen to help their bottom line by generating a reason for people to use DDOS protection for which Cloudflare is one of very few options that does not have a fixed limit.

Cloudflare has to be in bed with the US government, otherwise it would have been shutdown for ignoring illegal activity (ddos-for-hire) that's been reported to them (aka ignoring complaints is meant to remove your S.230 protection).