>Really, Cloudflare?

To be fair, forwarding abuse reports to the client is standard practice in the hosting industry.

There's been some debate about this in the past (efnet getting upset with Hetzner for example), but I think the general consensus is that it's not really the job of the hosting company to go out of their way to protect abuse reporters.

It's also important to understand that most abuse mail that isn't DMCA spam will be automated mail informing you of compromised machines on your network, it very much makes sense to automatically forward all this mail to the client.