You don't have to use the CDN of your own website
Just because you added a CDN on your website for speed and security, it doesn't mean you have to pass all your data and credentials …
Posts on Security
Lock your WordPress login behind CloudFlare and a keyword only you know
Let’s use CloudFlare as a WAF to block any or all requests when it doesn’t contain a certain keyword. The keyword only we know
Lockdown a web page with a secret keyword with Cloudflare WAF
Use Cloudflare WAF rule to lockdown a page with a secret keyword without adding any overhead to your application.