If they want to be a neutral public utility, they can rearrange their business to that effect.
I'm not disagreeing with you, or trying to defend Cloudflare – I just see a very complicated situation, especially when you consider the DNS ecosystem, which in itself is extremely shady. You also run the risk of DMCA-style procedures that would require equal application across service providers and would undoubtedly be abused by bad actors.
i.e. unless they want to host in a lawless foreign data-center begging for scrip-coin they should care.
=)
Anecdotal forest city / woodlands in Malaysia / Singapore note. The territorial dispute led to most organizations there doing shady business online, as nobody is ruling these lands, effectively.
i.e. if you aren't careful and someone drops a pill in your luggage, they do shoot people without trial on the following Tuesday.
And yes, having stuff reverse engineered at the local university care of an unscrupulous US company is common. One really can't take it personally, as it is legal there. =)