NSA collaborator or not, the mere existence of something like Cloudflare, which also tries to nudge you into skipping internal http/tls and just use that at the front, makes it highly likely that NSA is already deep in their infrastructure, just like they've been in the past for literally any big technology company in the US.
But yeah, zero citations, zero evidence, just based on history and what the goal of the organization is, it's pretty clear what's going on already.
I never claimed so, never would either, so who's being dishonest now?
What I've said is that NSA compromises everything they can get their hands on (lots of evidence of this), assuming that Cloudflare aren't compromised by NSA already would be foolish, but you're right, this is an assumption on my part, I won't claim I have proof of this, just like I don't have proof that the sun will rise tomorrow, but I do assume so too.
Tangent: I found your blog in your profile and liked your post on "Good Taste"^1