Just curious, what is your concern? Is it privacy related? Or does it inhibit consumption of APIs you tried to host with them? I don’t like the header either and I have a public API with Cloudflare but it hasn’t caused any technical issues as far as I know.