We are not "logging the usernames and passwords of users". You can read about how we do this in a privacy preserving manner: https://blog.cloudflare.com/privacy-preserving-compromised-c...