CloudFlare has the actual IP address that viewed the image. Which means some powerful (or rich enough) actors can get it.
This is very very bad.
This was... always, the case though? For any CDN service? How do you serve traffic to people without knowing where to send it?
This was... always, the case though? For any CDN service? How do you serve traffic to people without knowing where to send it?