Isn’t the whole point of Cloudflare to stop DDoS, though?
Cloudflare may be able to handle a botnet that can generate 250GBps of traffic, but a few hundred problematic forum posts coupled with some Twitter outrage totally jams them up. (Purposely leaving aside the qualitative details here.)
This shows that Cloudflare is completely defenseless against a certain variety of meatspace attacks.