DDoS attack protection is just one of the services CloudFlare offers. Saying it's the whole reason the service exists suggests that you haven't actually looked at what they do.
> they're not "policing" it in any sense of the word.
I didn't say they do, I say it's double faced. Which it is.