>"I don't understand tls termination"

Lots of people don't and that can create a serious problem when someone else is doing it. It's not unreasonable to have it in a cons list.

Also the cloudflare captchas absolutely suck. That's a huge con and you really shouldn't put up with it.

Cloudflare captchas mean I go back to DDG, and once more wish for a browser plugin that removes href attributes to specified sites, so I don't make the same mistake twice.

I'm not feeding a fucking robot just to look at a page.

There are browser plugins to remove domains from DDG and Google (for me: Firefox, DDG: https://addons.mozilla.org/en-US/firefox/addon/ddg-hide-unwa...)

Didn't Cloudflare have some sort of plugin that would bypass captchas if you set it up once ('proving' you're human)? Any use this plugin? How is it in practice?

I feel like the blog author understood TLS termination just fine. They just think that you can solve the same problems as CloudFlare without being actively hostile to privacy.