I imagine they had a lawyer clear this and so there must be some convoluted argument by which they think this is fine.

However, it still makes me lose trust in Cloudflare, this is pretty clear language to me that data is not used for anything but debugging, yet here we obviously see user data being mined for analytics.