They are though

Putting Cloudflare in between can help but it is certainly not a silver bullet. You are still putting it on the public internet. (Unless Cloudflare has some sort of authentication that I’m unaware of)