And your ISP and coffee shop do regular audits? What are you doing for DNS that's so much better right now?

The quality of my ISP and coffee shops isn't relevant. I was talking about "peace of mind" when using Cloudflare, not about the alternatives. Even if Cloudflare is the best option, that doesn't automatically mean I can relax about it.

That said...

Coffee shops or other open WiFi APs don't enter into it, since I use my own VPN server when I'm out and about.

So you’re sending your traffic to some other cloud host or your ISP, his question still stands

His question is not relevant to my statement, though, so I answered it to the best of my ability without changing subjects: even if Cloudflare is the best available option, that does not mean I can have "peace of mind" about using it.