I'm all for assuming the people who work there are good eggs with the best intentions, but Cloudflare, Inc. is a U.S. company. As I understand the U.S. legal landscape with regards to data and privacy protection, they could be forced to lie at a moment's notice and not talk about it.

I'm not claiming their lying or doing anything internally that is different. There is just nothing stopping the change from happening, now that the possibility exists

I'm claiming I don't believe them. They could write on their page whatever they see fit and do a completely different thing internally.