You forget to mention that the DDoS traffic causing these issues are also behind cloudflare, but they don't give a damn about them, for obvious business reasons.

Cloudflare controls supply and demand, which, by definition of the law, should be classified as extortion.