Isn't exposing something like this to the web asking for huge cloudflare bills?

Yes, we have a lot of various infra credits that we are using to serve this. Cloudflare workers are pretty cheap, though.