[throwaway744678]

Imagine someone with a fully configured HTTPS web server (without a front CDN), that adds Cloudflare in front of it when the load gets higher, and does not bother configuring their firewall.

[dalbotex]

Yeah, that does sound plausible.