I should probably go through my relay list and remove the ones that use CloudFlare - and probably pay for ones that don't.

I totally understand its utility - and I get that info on relays is public anyway - but it's as close to just having the NSA run a relayer as one can get. Especially if you let them handle SSL encryption.