Quick story: A friendly competitor started a site on Xenforo. He admitted that he really didn't get the attraction to the software but had heard so much about "code bloat" and other such nonsense terms and seen that all the "cool kids" were using it now so he did too. Here's his exact email to me when I asked him 6 months later what he thought about Xenforo now.
My order of preference is IPB 3.4.6, IP 4.0, vB 4.2.x, vB 3.8.x, phpBB, Xenforo.
I'm not at all sure that's fair. It's also not fair to their paying customers to have sites under heavy attack compromising their own. If anything, you should have said "Cloudflare is a bad free CDN" which I don't necessarily agree with either. The user has to decide if the features of the paid plans are of value to them or not. Put it this way, for users like myself with about 750k pageviews per month, the free Cloudflare is an absolute no-brainer when paired with CSF and the Apache plugin. If I continue to grow and experience any kind of DDoS attack, I'd jump at the $200/month Business plan.