From at least my experience, they're approach to "security" is absolutely non-existent
Setting aside that they're [most likely] logging all DNS requests (even those fancy ones over SSL), their non-existent care over attempted, (and, I suspect (but cannot prove) actual) domain hijacking is disturbing
I was a victim of an attempted domain DNS hijacking (https://www.reddit.com/r/digital_ocean/comments/dzp4st/do_i_need_cloudflare/f89ax6s/?utm_source=ifttt)
Cloudflare's response? After a couple WEEKS … absolutely nothing, in the end. I requested escalation to their privacy group, or security, or legal – because they do nothing to verify someone trying to register a domain's DNS with them is actually who owns/manages the domain
February 18, 2020 at 07:57AM
via reddit https://www.reddit.com/r/privacy/comments/f583it/noobish_question_the_fuck_is_cloudflare_and_why/fi091zh?utm_source=ifttt