I trust Tor more: https://blog.torproject.org/blog/trouble-cloudflare

You also mention Cloudflare hosting onion addresses, which is possibly the worst-case-scenario. Can you imagine Cloudbleed on Tor?