Cloudflare silently injects analytics into your site when you switch nameservers

Tell HN: Cloudflare silently injects its analytics when you switch nameservers

A Hacker News user reports that after switching their nameservers to Cloudflare to enable R2 bucket serving, Cloudflare silently injected a JavaScript analytics snippet into their HTML-only, JS-free site. The user had to navigate to the Analytics dashboard, add the site, and then disable the snippet, calling the approach invasive and arguing that such features should be opt-in, not opt-out.