> The S3 bucket sits behind CloudFlare to make downloading the binaries fast from anywhere.
Why not CloudFront? Moving binaries through CF CDN might not do for you. It's also seen that they don't really like you moving large data through their service [0].