Tell HN: Cloudflare silently injects its analytics when you switch nameservers

A fewer hours agone I switched my nameservers to Cloudflare successful bid to alteration R2 bucket serving done my ain subdomain, and I recovered retired that it silently had injected a JS analytics snippet successful my HTML-only JS-free tract textlog.cc — I had to spell to the Analytics dashboard, Add the tract to the analytics and then disable the snippet. I find this attack wholly invasive, you should opt-in to features for illustration that not person to opt-out. Just a informing retired location to folks who mightiness not beryllium alert of this.