Leszek@Avitus CloudFlare doesn't mention any guarantees of anonymity of the audience.
Someone made a decision to use their services with all the implications of using it. So either nobody at Signal cares about exposing endpoint IPs (which I believe to be the actual stance - but like @rysiek said let's see if they respond) or they care and didn't check it when using CFlare as a dependency.
Either way it's the integrator's responsibility to check if the chosen components fit the purpose.
All GNU social JP content and data are available under the