probably the fact Cloudflare doesn't just shut down sites at the governments request. I'd also imagine a good chunk of them have been wined and dined by Oracle, Google, Microsoft, and AWS lobbyists to think that Cloudflare is bad. I doubt non-technical federal agency heads are double checking what they are being told