Yeah, but you also already have to trust the certificate authority, your ISP, your employees who have access to the server...the list goes on.

Furthermore, I believe the way it works is that clients make an SSL connection to CloudFlare, who makes another SSL connection to your service (using different key pairs.) Granted, they still get to see all your traffic unencrypted, but it all just comes back to trust.