They weren't being hosted by CF, they were getting protection against illegal DDoS attacks. CF DDoS protection is an infrastructure service. Infrastructure level services picking and choosing who is allowed and not allowed, is a very dangerous thing. Such action quickly risk unraveling the entire net.