Bear in mind Cloudflare only protects one path to your server. If the origin IP is found you’re still wide open.