I’m sorry you feel that way, but you literally started off by doing that.

This seems like a lot of text for saying “unless you can predict all the specific ways a bad thing could happen, I think putting all your eggs in one basket is fine.” And under some circumstances you’d be right.

That’s why I said I don’t trust them to not fuck up, not that it’s something that should ordinarily be expected. Additionally, especially considering how the rule of law in their jurisdiction is going recently I wouldn’t assume it will always be this way.

Your registrar (the place you buy your domains) is where you update your nameservers. If Cloudflare have locked you out then you won’t be able to change them. Other standard registrars will have far less cause, legitimate or not, to lock or disable your account, since they don’t host/proxy your content.

I wouldn’t buy domains from Cloudflare from a risk mitigation perspective. At work I direct six figures of budget their way annually, but as a free-tier customer in my personal life I don’t trust them not to fuck up at some point and lock my account. If I register my domain elsewhere I can bring myself back online by moving the nameservers. If it’s registered at Cloudflare I’m fucked.

I can’t tell whether you’re being intentionally ironic. Yes the EU would be up for it. The EU didn’t ban cookies. Putting it simply, you do not need a cookie banner if you aren’t tracking people.