Cloudflare has a outflow pipe to US gov. Just like the rest of US based services. So if you are doing anything unsocietal as the currents define it then best not to use US based services. You can alternatively use China based cloud offerings as they wont share data with the US gov for obvious reasons.
You can achieve the same protection by knowing your endpoints and infrastructure and then banning anything with an unacceptable delta of traffic difference.(asp vs php, wordpress vulnerability bots, etc) If you have multiple servers you share the ufw firewall lists among them in real time unless you want to ban higher up the stack.
The DOS protection might be harder to emulate. But at that point something is out to specifically get you anyways.
You can achieve the same protection by knowing your endpoints and infrastructure and then banning anything with an unacceptable delta of traffic difference.(asp vs php, wordpress vulnerability bots, etc) If you have multiple servers you share the ufw firewall lists among them in real time unless you want to ban higher up the stack.
The DOS protection might be harder to emulate. But at that point something is out to specifically get you anyways.
Just wait it out or move to another domain or ip.