Isn't it obvious? OP has no F'n clue what they're doing.
If you use CF for DNS and turn on the proxy, they still MITM you.
Isn't it obvious? OP has no F'n clue what they're doing.