I've had a pretty heated argument with a supplier of a client the other day - since they use Cloudflare on their infrastructure. I wanted them to ditch CF - because of obvious reasons. And moreover because this particular client needs to take the examplary lead.
Later in the conversation they were open to replacing CF with an EU based alternative, as long as it is a single party that offers the equivalent levels of DDoS protection (the Pro level) and functions of a CDN too.
As much as I wanted to come up with EU-based alternatives, there are currently none. At least none that are a close enough match for the requirements.
In the end, we voiced respect to one another and agreed to create a playbook that allows for easy switching over once there is a fitting EU alternative.
This discussion turned out to be one of the best I've had this year.