I personally don't use CloudFlare but do manage a website which uses one for a job, and there's a button to mangle e-mail addresses, so I don't think this is their concern.

DDoS attacks are surprisingly negligible, comparable for ordinary IPs, so I don't think that's what they're protecting at.