Benefits
Must be turned on
Bot Fight Mode: https://blog.cloudflare.com/mitigating-bot-attacks-against-cloudflare/ https://developers.cloudflare.com/bots/get-started/free/
Scrape Sheilds Email Address Obfuscation https://developers.cloudflare.com/waf/tools/scrape-shield/email-address-obfuscation/
exceptions
CDN Basic WAF view security events in Security -> Events DNS Records with Comments
DMARC Management
Turning off email on additional domains
Still recommend implementing Vailmail so that you can see the difference between Forwarders and not CF shows IP addresses SPF Recorder inspector
At cost dns registrations

better dns management

Gotchas
Proxy, but this does not affect Google analytics
WAF is less effective unless you change your IP address and implement additional controls
Infinite Redirects * Mode - flexible vs Full
Rate Limiting