Safely is a spectrum. I’d argue that as long as you aren’t under active ddos, cloudflare’s stuff isn’t all that useful. For DNS, I’d take a look at desec.io.