The article itself even says the tipping point for daily stormer was "the claim that we were secretly supporters of their ideology" which is hardly any sort of Due Process.
There is a use case for buying them for testing purposes to apply on yourself, so it's not as cut-and-dry as you would expect.
Conversely, this site proudly advertises that it has zero "Know Your Customer" restrictions, bypasses Cloudflare protections, etc.
Quoting the site directly: "Some popular use cases are taking down competitor websites, creating unfair advantages in games and personal agendas."
Even their CYA disclaimers are flimsy: "We simply ask to only use our tools on infrastructure that you own or are permitted to attack."
Not "Require", "ask".
This one is fairly obviously bad, but some will be more ambiguous, and I wouldn't expect Cloudflare to be the one policing them all.