That makes sense as CloudFlare also has a history of minimizing important security breaches, like when they sprayed their customer's and customer's customer's private data all over the Internet:
https://en.wikipedia.org/wiki/Cloudbleed#Cloudflare
Tavis Ormandy said:
I had a call with cloudflare, and explained that I was baffled why they were not sharing their notification with me.
They gave several excuses that didn't make sense, then asked to speak to me on the phone to explain.
https://bugs.chromium.org/p/project-zero/issues/detail?id=11...
Cloudflare did finally send me a draft. It contains an excellent postmortem, but severely downplays the risk to customers.
https://bugs.chromium.org/p/project-zero/issues/detail?id=11...
Maybe that was before this guy's tenure, not sure. The point is that most companies do this, and users and customers should push back on it.