What about the site owner's water supply?

The disagreement here seems to over whether Cloudflare is more like a restaurant, or more like a utility company. Given the ubiquity of DDOS attacks online, (and the fact that KF seemingly can't stay online without DDOS mitigation), I think there's a good argument to be made that DDOS mitigation might be more like a utility.