I wonder if the admins are using a k8s setup with CF? This way they have the CF protection and can spin up or down as needed when they get many requests. Thoughts anyone?
What does cloudflare have to do with k8s? Maybe you're confusing it with load balancer.
To answer your question, yes, some big instances are actually using CF protection to mitigate DDoS attacks.