So in the example, is Cloudflare proxying to http://example.com or https://example.github.io?

In the case of the former, wouldn't we be setting a false sense of security since the request is traversing the internet unencrypted from the GitHub servers to the CloudFlare servers?

From what I understand, the benefit would really be to prevent snooping on requests between the end-user and CloudFlare, correct?