I was thinking the exact same, but with Cloudflare Pages in order to use the WAF to see if it may help thwart any PHP-related vulns