Cf has really mature trust and safety as well as security teams and tools. I've no doubt they've taken bad actors into account considering all of the other offerings they have that have also attracted bad actors.
No question. They've been dealing with that factor at hyper scale for many years now. The only question is how they've already decided to go about it.
They'll certainly want to make a big splash with the product, given the cloud giants they're taking on. That's better done with fewer limitations initially, even if they know ahead of time the various ways they'll restrict abuse over time.