Cloudflare still fronts many sites that are most definitely violating SESTA, but presumably Cloudflare chooses to look the other way when they're taking money, or the CEO doesn't have a problem with the site.
Realistically they either don't know about what those sites do or their legal department updated their advice after reviewing SESTA and applicable case law.