My understanding is that they tapped communication nodes before. I would be surprised if they can't tap the pipes to cloudflare.