So let me get this straight.

A deranged onliner petitions Cloudflare, a CDN and WAF, to drop kiwifarms.net.

CF releases statement saying "no".

Two days later someone (shareholders, board, payment gateways, etc.) sticks their hand up Matthew Prince's ass and operates him like a puppet to have Cloudflare fire kiwifarms.net as a customer.

Two weeks later kiwifarms.net is hacked via a combination of vulnerabilities that Cloudflare's WAF /may/ have previously been mitigating.

Wow.