I employ VPN, TOR, and additionally, I manage sites utilizing CloudFlare. I can tell you this much: There aren't many alternative services that safeguard your website and gather statistics while respecting the privacy of the end user. CloudFlare even provides onion routes for TOR users, which I've naturally activated for my website. Thus, the issue doesn't rest with CloudFlare; it's a tool. The true issue lies with the webmasters abusing their power and using overzealous rulesets.
They could easily apply the same rulesets by utilizing nginx to proxy the traffic and implementing blocks on their side, avoiding CloudFlare altogether. The only distinction would be the increased expenses and a different host, nothing more.