I'd argue that the certificate authority does not have the ability to decrypt your communication because of the nature of private and public key mechanism during the whole TLS certificate procedure. You do not send your web servers private key to cloudflare when requesting a certificate.
That would actually be pretty wild...
Other then that you're probably right.
Oh my god this is hilarious, thanks for the recommendation of IMDb ratings. "Why release a movie with basically the same title (The Twisters) and the same concept in the same year as a super popular movie? Just a waste of $10." Welcome to the asylums business model for over 25 years. Can't believe that it still works, with streaming and vod probably even better then ever.
You're right, forgot that you can just not encrypt on your servers end and use cloudflare to do that for you, especially when used as CDN