Regardless of whether or not you provide your own SSL certificates, cloudflare still uses their own between their servers and client browsers. So any SSL encrypted traffic is unencrypted at their end before being re-encrypted with your certificate. How can such an entity be trusted?
Half of the people don’t remotely understand the issue. The other half is aware that what’s in behind isn’t trustworthy anyways if it’s “in da cloud” and just went all YOLO-mode.