The rule of thumb is governments where Cloudflare has equipment, personel, or banking.
There is a procedure to get a foreign case recognized in the US, too, but it has to be serious, and it's not an easy process.
There is a procedure to get a foreign case recognized in the US, too, but it has to be serious, and it's not an easy process.
I again ask: is it desirable for any of those countries to be able to unilaterally force a company to enforce its laws regardless of where the individual in question is?
If CloudFlare chooses to do business in China, that's a choice they're making and it comes with consequences.
Maybe they can offer service where customers will only be served from equipment outside of China, maybe that's not something they choose.