A fundamental issue with CDNs is that you have to trust them. Even for public content, who accesses what is valuable private information. I can imagine IPFS making this worse, when anyone who wants to observe what is accessed by whom need only mirror it.