Images uploaded everywhere get scanned.

Besides. It's public data in Nostr. It's going to be scanned by various people and entities.

If you don't like Cloudflare then recommend and alternate solution to scanning. If it's cost effective for them to use it, maybe they will look into using it if enough users request the change.