They also only allow HTTP traffic for the free tier, which is another way they push you towards business tiers.
I don't think that's true. I'm pretty certain all of my domains are HTTPS only, but maybe that's because I own the domain? Does cloudflare offer free domain names for tunneled traffic?