I obviously don't agree with spain doing this, but I also have trouble feeling sorry for cloudflare, since they're also in the business of randomly blocking certain IPs from accessing half the internet

Cloudflare created a problem where everything is centralized.

It's also, not that great. Even the most crude WordPress vulnerability scan requests aren't flagged or blocked. It seems most DDoS attacks may come through as well.

Don't get me even started on the checkbox.

It's a US data-hoarder.