From some of your comments, it seems like you are heavily involved with similar situation as former CloudFlare customer?
put it this way: if I am a security researcher and I want to publish a paper on DoDs, I can make use of CloudFlare to accomplish my objective. How do you distinguish good from the bad?
What do you propose they should do?