Also, if a legal group is considered verboten by CF then they’re incredibly susceptible to DDoS, and there are realistically no alternatives due to that. It creates an avenue for private censorship. It also creates a double standard where illegal websites are allowed (despite being actively reported to both CF and law enforcement), while legal websites that are “unattractive” aren’t.

A similar idea in the other direction: Cloudflare can effectively block access to internet for selected groups. This might be lawfully required by USA at one point or another for now obvious reasons.