Being opt-in doesn't negate the fact that it is closing the web.

I agree but it's a bit nuanced.

If you can still buy a domain, publish a site, and other people read it as usual, then the web is still open imo.

But I can see a lot of negative network effects if/when Cloudflare gets to control 60%+ of web traffic.