This is sort of my point. Cloudflare is essentially invisible to the users unless they exhibit markers putting them in a suspicious category. Which is fine with me as a provider. Meanwhile the switching cost for me as a site provider is effectively 0.

The only effect they can really have on the market is making everyone have to up their game to be competitive. They can't lock me in because of how the internet works. If I as a site operator want to drop them it's roughly about 10 minutes worth of work.