Did they ever clear up their more-than-doubtful claims about their relationship with Cloudflare?
They recently claimed that "Even when we’re under attack, we still don’t use their TLS certificates, so Cloudflare will NEVER content inspect our traffic."
Cloudflare DOES NOT offer a passthrough-TLS option.
https://hub.fosstodon.org/fosstodon-and-cloudflare
This was pointed out with no response which made me doubt more than just their technical abilities...