A high-end "hardware firewall" is now an x86 server (usually previous-generation) running some fairly expensive proprietary software. For a company like CloudFlare that has good scale and security as a core competency, I think doing it themselves makes sense.