This policy seems to only apply to content that they host. It appears that they don't intend to apply this policy to websites that they are only providing DDoS mitigation to, such as KiwiFarms.
Whether Cloudflare is hosting the content or mitigating DDoS attacks against it, they bear some responsibility for the content being accessible. I see no good reason for them to have different policies between their hosting and DDoS mitigation services if they actually care about not propagating the content they refuse to host.
Whether Cloudflare is hosting the content or mitigating DDoS attacks against it, they bear some responsibility for the content being accessible. I see no good reason for them to have different policies between their hosting and DDoS mitigation services if they actually care about not propagating the content they refuse to host.