Cloudflare isn't in a position to accept or decline LaLiga's requests; LaLiga, supported by a ridiculous court order, is forcing ISPs to block Cloudflare IP addresses.
I think that's probably what they'll be doing in the end, so it's interesting to observe that they haven't done so already. Do they maybe have at least an internal domain reputation system so that long-time customers mostly share IPs with other long-time customers and are less likely to get caught in the crossfire?
They could. On the other hand, why should they? I would much rather see them fight this court order and make it stop across the board.