Of course, Cloudflare always tries to put the blame on the website owners which just enable a list Cloudflare provides them. Assuming the author is right, it's Cloudflare's fault for not vetting their data, not the website owner.