If Cloudflare would like to be nationalized, I'm happy to have a discussion of applying government rules to them. Until then, they're a private company, "due process" does really not apply.
If we think that protecting sites from DDoS is a public good (and I think that's a good question), that is a task that should fall to government entities.
The point is that Cloudflare thinks due process, not DDoS, is the right way to bring down horrible websites. Thus they protect them until such due process happens.
If Cloudflare would like to be nationalized, I'm happy to have a discussion of applying government rules to them. Until then, they're a private company, "due process" does really not apply.
If we think that protecting sites from DDoS is a public good (and I think that's a good question), that is a task that should fall to government entities.