Independently of what they may or may not have done, Cloudflare is one company. Tunneling everyone’s data through one company creates an enormous concentration of power, i.e. putting all the world’s privacy eggs in one basket, so to speak.

That's true. And they'll have even more data when DNS-over-HTTPS via Cloudflare becomes the default.