Comment by juros

that's a big misunderstanding. Cloudflare DOES see the contents because they terminate TLS. All requests and responses, with bodies, credentials and cookies in plaintext.

The NSA's dream made true.