CloudFlare never looked like neutral infra, since they control the traffic so they need to (from a legal standpoint at least) block certain things. There has always been things cloudflare would not host.

CA:s do not control the traffic, they just say if a key is associated with a domain.