Cloudflare benefits so long you buy protection from them. It doesn't need to be you. So long as you think you need their services it doesn't matter if you actually do. They also have the ability to keep you running if your project explodes in popularity.
Cloudflare. And any other DDoS protection vendors.
Not saying they caused it but obviously they benefit the same way roof tile manufacturers benefit from hurricanes.