I first ran into Cloudflare's "policy" about passing through abuse reports to the entity performing the abuse using their service when I tried to report a booter service to Cloudflare, some years ago.
I did not enjoy receiving death threats from LizardSquad for having reported them, and was very glad I had obscured my information when I did the reporting.
Cloudflare's pretense to neutrality is - and always has been - horseshit, and demonstrates the catastrophic weakness of centralized infrastructure generally.