Discourse e Cloudflare

What I miss in this discussion is the differentiation on WHAT Cloudflare features generate problems.
All I have read so far unanimously mentions Cloudflare only as a CDN but as it stands today, Cloudflare is the company and also the name for their PLATFORM of different functionalities (SASE, Network Services, Zero Trust, Analytics, etc).
If the caching or optimization part of Cloudflare generates the most problems, then communicate that.
But why would using Cloudflare Tunnel with Cloudflare Access to massively increase the security of the Discourse instance be disregarded just because it bears the same “Cloudflare” name?