A lot of the bases are covered. It would need a bit more to be fully compliant. The trade-off between simplicity and comprehensiveness is hotly debated in privacy circles.
+1 Microsoft Word is a very capable piece of software. If Microsoft's software engineers were forced to write board papers and legal contracts, it would probably be more intuitive too. IntelliSense for defined terms would be amazing.
I think the parent is making a joke about Rover cars' reputation in the 1970s.
"The [1976 Rover] SD1 went head-to-head with rivals such as the Ford Granada, Citroën CX and Opel Senator as well as premium models like the W123 Mercedes-Benz and BMW 5 Series – all of which still form the main alternatives. Unfortunately, the big Rover soon gained a reputation for poor quality, reliability issues and a propensity for alarming amounts of rust..."
Bear in mind that there are multiple ways for Cloudflare to give law enforcement or intelligence agencies customer information that do not breach one of these six statements.
It doesn’t mean that they are not helpful. Just that - as warrant canaries go - they are not complete.
Not an attack but certainly a person in the middle.
IAAL and advise on data protection and privacy.
Anecdotally I can tell you that the MitM aspect of Cloudflare and other similar providers is not well understood.
My impression is that a lot of people use these services without really understanding the implications.
For example, when you look at some of the risks that privacy laws are trying to protect against, especially access to data by foreign actors (including government agencies) without due process, use of these types of services changes the game.
Sometimes the benefits might outweigh the risks, but the decision to use these types of services should not be taken trivially.
That said, I routinely use Cloudflare for my personal projects.
