Isn't this well known when using CF as a proxy? Not sure how they would provide traffic / DDoS telemetry otherwise.

They're serving the HTML, they have every ability to track individual web requests without modifying the content they're serving.