The term zero trust is bad marketing. You have to trust Cloudflare. The traffic is not end to end encrypted in their tunnel and access products (and pretty much all their products), and Cloudflare scans the traffic.
Looked at my calendar to see if it was April 1st when I saw this blog post. Why in the world would CloudFlare partner with CrowdStrike unless the same CIA team thats running CrowdStrike has their hand in CloudFlare...
About that Zero Trust...