The point between cloudflare and your app doesn&#x27;t need to be unencrypted, the lack of privacy is that cloudflare is a massive MITM and thus has access to all the data between you and your app.<p>Thus the evil guy sitting back in their chair is cloudflare or it&#x27;s you for not configuring https between your app and them.