> If the website is hosted on a CDN or cloud provider, then someone monitoring the IP traffic only knows that you're visiting something hosted by that CDN.
This isn't true, because the request leaks the hostname in the handshake via SNI:
https://en.wikipedia.org/wiki/Server_Name_Indication