Maybe I'm too old, and stuck in the mud with the pre-ICANN intention of the original TLDs, but does it seem odd to anyone else that they host their network services on .com and their corporate information on .net?
Your comment sent me down a research hole. Turns out, stock ticker symbols can be reused but I can find no evidence that NET was used before, which seems impossible.
Cloudflare.net is behind Cloudflare, but the actual site is hosted by Q4. They provide hosted investor relations portals for a bunch of publicly traded companies.
Putting it on a non-cloudflare.com domain puts it outside the security context of the main site and they don't have to worry if it gets hacked. Google does something similar by hosting third-party stuff on withgoogle.com and a handful of other domains.