Does Cloudflare have the same sort of legal restrictions that Comcast or other ISPs, which are regulated by the FCC, have? [PS this isn't a rhetorical question. I'm genuinely curious]

I understand that the current FCC is basically intentionally toothless, but that wasn't the case a few years ago, and doesn't necessarily need to be the case a few years from now.

Even Tor isn't great for plaintext HTTP, as it requires you to put an anonymous, unaccountable middleman (the exit node) between you and the internet. The fact that that middleman doesn't know your real IP address is little comfort when they can read and modify all data you send over their connection.

Granted, it's not too bad for Tor browser, where all browsing sessions are strictly anonymized and JavaScript access is heavily restricted so MITM attackers are limited in what they can do provided you never transmit anything sensitive or download any files over plaintext, but for general purpose browsing I definitely wouldn't recommend it (even ignoring the performance issues).