CF is not a private company funded by a foundation with a time until the funding runs out measured in 30-40 years. It is a public company with a small number of customers that provide majority of its revenue.
It simply isn't prudent to say that it won't explore other revenue streams in future and that monetization of data won't be one of those streams.
> Regardless, it's opt-out not opt-in. Which is against newer consumer protection laws such as GDPR.
I understand the argument in theory.. but the reality is CF is a more trustworthy DNS provider than basically any consumer ISP in the EU.
Historically we've seen many cases of US companies handing over data to US authorities (willingly or not).
The problem with the US is that data is being used against you, like recent events have shown.
I don't think anyone believes CF will start selling data, that's not what the article argues.
Regardless, it's opt-out not opt-in. Which is against newer consumer protection laws such as GDPR.
> DoH is vital to protect users around the world from censorship and worse.
This isn't black and white. Yes there is upside (as both you and the article agree), but the downside of how DoH is implemented here is that you have to point all your DNS queries to a US company. Historically we've seen how this is a bad idea for global internet privacy (eg. PRISM, etc).