I’m no expert either but as I understand it, the core service they are most well known for is protection against DDOS attacks. By routing traffic first to Cloudflare before sending it to the intended destination, it can try to check to make sure that whatever it’s routing isn’t coming from a botnet or whatever.