Hacker News Reader

Data is passed through -unencrypted- those edge locations though.

What data exactly?

They serve HTML, CSS, JS, and images. The actual data is transmitted using AJAX requests towards an HTTPS API in EU.

Ah, so they're not using CF on those. Got it, that's fine then. It's rare with Cloudflare to see them used purely for static assets.