Porn and crypto sure, but what are nazi's using free hosting and bandwidth for?
They may or may not fully utilize the bandwidth, but they will absolutely take advantage of access to resources that don't require real identification, and that adds an extra burden of regulatory compliance on the company offering it (even if it is just hiring a few extra people to manage takedown orders, etc).
[Edit: someone found an article from later in 2017 where it seems like Cloudflare resumed hosting Stormfront just over a month after it had stopped hosting it.]