DDoS affecting most of the fedoraproject.org services

Why don’t they just use Cloudflare?