I may be naive, but they offer a privacy service which adds a hop on the way. They don't control both their server and the third-party, and that is the whole point of the design, right?

How is that exactly what you would expert from a covert government operation?

Do we agree that the design goes through two hops, only one of which is controlled by Cloudflare? And that it is the whole point of the design?