Cloudflare is framing this like there is an imminent emergency that they just averted. I think the burden is on them to bear the supporting facts. The blog post doesn't have any.