They allow &quot;SSL termination&quot; where traffic to&#x2F;from Cloudflare&#x27;s Edge is protected with TLS, as well as full TLS, where you also provide your own certificate and the entire chain is protected.e.<p>So, you can very easily opt out of the &quot;MITM&quot; if you buy your own certificate. You can use a self-signed one to get a little more safety within Cloudflare&#x27;s network, or a CA-signed one for a lot more safety.