It's like bad software architecture. Imagine we already have a security module responsible for deciding what requests are properly authenticated and authorized. And we have a service module responsible for some of the processioning of requests. Now someone comes along saying they think the security module isn't doing a good enough job - and their proposed solution isn't to fix the security module, it's to let the service module do request authorization too. And not even by asking for input from the security module about what should be authorized, or having a shared definition of authorization rules that they both rely on, but by letting the service module decide on its own what it thinks should be authorized. You'd tell whoever proposed that, our system already has that responsibility living in a single place, and spreading it out to multiple places is how you turn your code base into an unmaintainable mess, thankyouverymuch.

>5 years ago I might have agreed that Cloudflare should intervene a lot more.

Can you expand on this a little more. What were your thoughts 5 years ago, what changed your mind?

It's their service, you host content on their terms already. Of course they have the right to remove content that does not comply with their terms.

Sorry, are you asking why Cloudflare has a right to terminate a business relationship?

The most immediate reason for that is of course that you grant them that right when you sign the customer agreement, the default one even containing:

> Additionally, we may at our sole discretion terminate your user account or suspend or terminate your access to the Service at any time, with or without notice for any reason or no reason at all.