Indeed, this might likely fall into criminal behavior and not civil (though they’d be liable for civil damages as well). Someone should let a few jurisdictions that have cloud flare customers and theft is illegal know about this.