Could you elaborate on your point of them using Cloudflare ?
My understanding is that their websites would be behind Cloudflare for their CDN and anti-DDoS services, maybe WAF as well. Solely looking at CDN services essentially the options come down to Cloudflare or Akamai who have a global domination of the market.
I didn’t notice the 3 years part till I read in your comment.
Are there any privacy respecting CDN services though?
I won’t comment on what Session is/was doing with Cloudflare services, but say if I am using DoT on my device for encrypted DNS requests, and the traffic is also E2E encrypted, how much can such a provider really see ?
Tools that we have at my job won’t be effective if they receive an encrypted payload.