Comment by explain

If you set the nameservers but didn't claim the domain in Cloudflare, then anyone else could claim it and start serving on it. The only real verification that you own the domain is that the nameservers are pointed to Cloudflare.