Cloudflare's business model is playing both sides. They sell anonymity to attackers and mitigation/protection to the victims.