The contention was that Cloudfare could have just signed up for the cheap support plan if they wanted private problem reporting, and I don't think that would be as easy as was suggested.