I'm not a network engineer, but it seems like the kind of thing that might be very hard to detect when you're already inside or near to the google.com domain. Or maybe CloudFlare just got there first.
I don't think it's necessary to call BS on Cloudflare without any kind of evidence at all.