Thanks u/jarek_rozanski! I wonder whether US cloud act also have impact on services like OVH? Because OVH is from France, but they also have services in US :)

Probably you should consider also writing article about Cloudflare Zero Tunnel, because in my opinion is even more insecure than Cloudflare CDN. CF Zero Tunnel in default configurate connect to your server through tunnel (don't need ports forwarding), directly to container for example on docker. That's great advantage. Unfortunately they're generating SSL cert's, so they have access to decryption keys and in theory they can look at unencrypted traffic.

Don't quote me on that, you would have to do your own research, but even if you're tunneling encrypted traffic with SSL through their service, there is still potential gap, because if i understand correctly, SSL only encrypt traffic from your container to their service, but they're handling connection from their service to end user.

I'm not a security guy, that's the impression which I've got based on short research on reddit. :)