This seems like a lot of text for saying “unless you can predict all the specific ways a bad thing could happen, I think putting all your eggs in one basket is fine.” And under some circumstances you’d be right.

That’s why I said I don’t trust them to not fuck up, not that it’s something that should ordinarily be expected. Additionally, especially considering how the rule of law in their jurisdiction is going recently I wouldn’t assume it will always be this way.

Your registrar (the place you buy your domains) is where you update your nameservers. If Cloudflare have locked you out then you won’t be able to change them. Other standard registrars will have far less cause, legitimate or not, to lock or disable your account, since they don’t host/proxy your content.

I wouldn’t buy domains from Cloudflare from a risk mitigation perspective. At work I direct six figures of budget their way annually, but as a free-tier customer in my personal life I don’t trust them not to fuck up at some point and lock my account. If I register my domain elsewhere I can bring myself back online by moving the nameservers. If it’s registered at Cloudflare I’m fucked.

The fuck is Forejo. I’m running a personal Forgejo instance and have contributed to the project. It is not for-profit.

I don’t know what you’re running there mate, Forgejo is a golang app.