There are plenty of other companies out there that provide DDoS protection. If they can't find even one that will host them, perhaps they might want to consider the possibility that their content is reprehensible and there's a reason no one wants to do business with them.

If Cloudflare was the only game in town (or close to it), I might be more sympathetic to this argument, but... they're not. Not even close.