After Gandi was bought up and started taking extortion level prices for their domains I’ve been looking for an excuse to migrate registrar. Last week I decided to bite the bullet and move to Porkbun as I have another domain renewal coming up. However after setting up an account and paying for the transfer for 4 domains, I realized their DNS services are provided by Cloudflare!
I personally do not use Cloudflare, and stay far away from all of their products for various reasons.
By the way, when self-hosting open DNS resolvers, add some security measures and monitoring or your shiny new server will mostly deliver DNS amplification attacks to people after a few weeks. That seems to be missing in the config here.