From another cloudflare customer, if our sites still work internally it’s marginally better than them being broken both inside and outside the org as they would be if they were ddosed directly. I guess it depends on what kind of services you’re running.