Cloudfare and Hetzner should see this vulnerability of their own making and DO SOMETHING about it.