Do you think perfect opsec is a realistic target for your average human being (especially outside the tech bubble) or did you just want to victim blame?
The fact that twitch streamers still regularly get their addresses leaked despite taking appropriate measures shows how impossible of a standard this is.
I'm not sure what reality you live in, but I had decided long before I told anyone at work and they still kept misgendering and deadnaming me regularly without me magically getting them fired. The only solution really is to switch jobs and never tell them your prior name.
The only exception to this is very obvious malice. Everything else is more likely to get you fired if you complain to HR than them.
Then why are they still hosting several sites that people complain about it all the time too. Cloudflare loves providing services to Nazis as long as they don't get themselves associated with mass shootings too often in the same small time window (8chan) or your Infosec hire turns out to be associated with some of the Nazis who claim they have inside help to stay on Cloudflare. (Daily Stormer)
You're acting like "lobbying to make them" is as easy as following a 3-step how to guide.
Think about trans people as a demographic for a second.
We have very little economic power or numbers worth mobilizing for votes. Absolutely nobody has any interest in lobbying for us, corporations posturing to appeal to idealistic liberals (and then doing nothing) aside.
The only resemblance of institutional power trans people have is to appeal to those that have the actual power.
That is a lie. Nobody is making "bathtub estrogen". It's not that easy to make. It's always been a joke.
Estradiol as a medication is easily available. It is listed on the WHO list of essential medicines and very commonly prescribed to women after menopause. So there's no money to be made there either.
No, but Cloudflare and several other ISPs will not drop you simply because a large volume of people complains. This doesn't work like Twitter moderation. The quality of these complaints warrants not wanting those people associated with you.
A website that bullies, ridicules and publishes private information of people they do not like, and then pretends they're not culpable when awful things (suicides, swattings) happen as a result because they technically really aren't responsible for them. Not that they don't usually celebrate when it happens.
A trans twitch personality was swatted a while ago and fought back by informing everyone involved with keeping the site alive. They have been dropped by about 99% of the ISPs they've been with (including before that campaign, but now also by Cloudflare).
EFI System and /boot are often the same partition, but they don't have to be, GRUB can boot a kernel and initramfs off most common linux filesystems (and less common ones like xfs, hfs and reiser), it can even decrypt a LUKS partition.
The fact that twitch streamers still regularly get their addresses leaked despite taking appropriate measures shows how impossible of a standard this is.