Ask HN: Why does Cloudflare not remove reported phishing sites?

Roughly a week ago, after a physical theft of a phone I reported a phishing site pretending to be Apple/iCloud.

This is not some random cyber-only phishing attempt, instead, this one is operated by a real world criminal gang associated with the physical theft of devices, then further attempting to gain access/unlock said devices.

It is yet to be removed from Cloudflare's service.

1. Why? 2. Why are they judged by a different standard?

Thanks