Kind of interesting. While blocking some other traffic to mitigate DDoS, Cloudflare could let through traffic from their VPN as they know those customers quite well.

Or maybe they could work with sites to remove annoying captchas from these trusted users.