I’ve always rolled my own, and I’ve never touched Cloudflare, but from what I understand of what they offer, it should be possible, and largely equivalent from a security perspective.

I prefer to not be dependent on systems I don’t or can’t control or jettison, but that requires a level of commitment to continual vigilance and learning few can justify.