Right, so I’m trying to determine if that is worse or if exposing a service without Cloudflare (and being more at risk from someone trying to break into my service because of not having the monitoring/protection Cloudflare provides) is worse.

For most things I agree but I this case I’m thinking of a service where you want to have a group of people access and they all aren’t willing or tech-saavy enough to install a VPN