Agreeing with your points, especially regarding Cloudflare! For the record: we did pass ISO 27001 and we use Render.