You're missing the part where it's a single company, not just "the entire anti-DDoS infrastructure", that's being talked about here.
It would be perfectly possible (no idea how practical offhand) to have an entire ecosystem of competing CDNs all doing the same thing that Cloudflare does, rather than just Cloudflare making those decisions all by itself.