even if they were breaking tos (and i don't think it sounds quite so cut and dry), shouldn't the response be to notify them and allow them to fix it, or just terminate the account? demanding a ton of money to make the problem seems a skeevy way of handling it on cloudflare's part.