You can google for cloudflare issues ranging from providing hosting for actual nazi sites to extorting customers by threatening the exact scenario se saw in this blog post. Feel free to google "cloudflare account suspended" to see many posts about people having not just DDoS mitigation disabled, but everything related to an account deleted and disabled. Many of those people had the audacity to, get this, rely on DDoS protection! The nerve, right?