Citadelo have published this excellent post on how to optimize security when using Cloudflare to “protect” a domain.

Some very good points re: OSINT mitigation are outlined. A good read!