Whenever you see someone recommend Cloudflare or something else that decrypts and re-encrypts TLS for something, esp. for something related to open social media or media storage etc., reply with this picture from the Snowden leaks
@pojntfx Plus the re-encrypt bit on those MITMs-as-a-service so far seems to be entirely optional, so you can literally get the "Traffic in clear text here" for everyone between the MITM and the actual host in addition to the MITM.
@lanodan I think it means added in one direction (outgoing) and removed in the other (incoming)