Except if cloudflare is part of a PRISM like program, associated with a gag order. In which case they have pwn half the planet security.

Are you aware "PRISM-like programs" apply to every single US based webserving entity? Why are you calling Cloudflare out when there's thousands of companies who are subject to the very same risk? Is it possible that PRISM programs bear no relevance at all to this conversation?

Centralizing the log files for the majority of Internet services in the hands of a few companies will never be good for security

That's a laugh. Are you seriously implying people who benefit freely* from Cloudflare's state of the art network firewalls and anti-ddos shields are somehow more at risk than others because they contracted with a particular security provider instead of rolling their own security?

That assertion will require lots of hard evidence because the vast majority of indicators indicate otherwise.

* free or less than 20$/mo

This read more like an advert than a comment, and that is certainly the most loaded question I've ever seen in written English.

Giant centralized troves of personal data are a huge risk to everyone. Civilization pivots and mutates rapidly, and it's clear to nobody at any particular time which way it may lean next, or whether it will lean toward them or on top of them. If anyone had told you there'd be global mass beheadings of century-old statues 3 weeks ago, I suppose you'd have been laughing then too.