> I don't think it's necessarily a dumb question

It's not a dumb question, but OP didn't answer it. Cloudflare is fronting the website. So we don't know if the server is handling the entire traffic, nor if it's using TLS between it and Cloudflare.