On: Cloudflare automatically fixes Polyfill.io for fre...

[reissbaker]

Who is the "we" here? If you're a Cloudflare customer, you're probably glad to have Cloudflare automatically defend your website against supply-chain attacks like this: after all, security is one of their selling points.

when does cloudflare starts to inject ads into my content

You content, as in, you the developer who is making a website, and has set up Cloudflare in front of your website? Presumably they wouldn't inject ads into your website, or else you'd stop using Cloudflare: just change the nameservers in DNS to point to someone else.

[wakawaka28 → reissbaker]

There are problems with Cloudflare beyond just the potential for ads. They can snoop a LOT on the site traffic of their customers.

[reissbaker → wakawaka28]

True of pretty much any CDN, though — once you let them generate certs for you, or give them your certs, they can see your traffic.