Or read the contract you sign with cloudflare as part of the buying agreement.
"All ICANN-accredited registrars are required to allow registrants to transfer domain names to another registrar."
Now as the registrant you have right to redeem the domain so you could recover via that route. So the domain CAN be saved.
You may not have even originally agreed to said terms, and they were shoved at you in an update which you "can opt out of" by discontinuing your service.