Then near the end they introduce their central gateway to this decentralized web, and tell us that another similar gateway is merging into theirs.
I'm not against introducing more options for decentralization into browsers, but I don't think you're going to do that by making it unnecessary through central gateways.
"It means that while Cloudflare provides resolution-as-a-service, none of the components has to be trusted."
Of course it would be better if there were multiple interchangeable "resolution-as-a-service" providers, and even better if no one needed to use those services because their OS provided the functionality locally, but we're unfortunately a long way from that, and we shouldn't let the perfect be the enemy of the good while pursuing that goal.
ftfy
Be that as it may, it seems mostly fine for cloudflare to cache distributed content and to help with lookup. If IPFS etc. end up depending on them too much then cloudflare can be a point of failure if they pull the plug.
That said, I found elsewhere in the cloudflare site (https://www.cloudflare.com/en-ca/distributed-web-gateway/) that they do indeed support IPFS DNSLink on their IPFS proxy, so ill shut up about it :)
I guess its more a way of them tacking on additional 3rd-party resolvers, instead of proposing to resolve IPFS via blockchain.